Security Governance Specialist

We are the leading Tech Company in Europe, supporting digital innovation for over 45 years. We are committed to bringing digital technology into every business and supporting a wide range of clients, from HR to digital payments.

Responsibilities

• Translate requirements into code to create, improve, and maintain high-quality software in a fast‑paced development environment.
• Drive the continuous improvement of the organization’s application security maturity, defining a structured and scalable approach to secure software development across teams and products.
• Define, measure, and track key security KPIs related to vulnerability management processes (e.g., detection, remediation, exposure time), providing visibility on risk and progress over time.
• Lead application security initiatives across the organization, implementing security‑by‑design principles from the early stages of development.
• Contribute to the definition and evolution of security controls and practices, maintaining alignment with internal standards, regulatory requirements, and industry frameworks.
• Collaborate with Product Owners and development teams to align security objectives with business priorities and promote a shared security culture throughout the software development lifecycle.

Qualifications

• Good knowledge of application security frameworks such as SAMM, ASVS, NIST CSF, and similar.
• Excellent understanding of certification standards like ISO 27000, as well as NIS2, DORA, ACN guidelines, PCI‑DSS, and their impact on application security.
• Knowledge of AI‑focused risk and security frameworks, including NIST AI RMF, EU AI Act requirements, ISO/IEC 23894, OWASP Top 10 for LLMs, and Google SAIF will be considered a plus.
• Understanding of AI‑related risks, key facts, and ecosystem dynamics, paired with strong curiosity and continuous awareness of the current and emerging AI technological landscape.
• Advanced proficiency in English (C1 level).
• Growth mindset with the ability to turn challenges into opportunities.

Benefits

• Short working week: no Friday afternoons.
• Flexible hybrid working model with modern tools and infrastructure for remote productivity.
• Personalised development programme to build skills and contribute to the company’s goals.
• Inclusive and respectful work environment fostering collaboration and respect for differences.
• Welfare plan tailored to individual needs and a focus on wellbeing.
• Opportunity to work on innovative projects with a focus on sustainability and community impact.

Location

The position is open in the Milan or Rome offices, combining on‑site and remote work with a flexible hybrid schedule.