Security Governance specialist

Experteer Overview

In this role you will strengthen security governance and risk management within Generali’s international operations, leveraging AI to enhance governance processes and decision‑making. You will partner with Legal, Procurement and Finance to oversight audits, third‑party security, and control frameworks, while tracking regulatory alignment (NIS2, DORA, ISO). You will help shape standards, monitor certifications, and drive continuous improvement of the security program. This position offers you a chance to impact risk posture at scale and to apply AI to governance in a dynamic, international environment.

Retribuzione / Benefits

• Manage security governance activities including KPI reporting and IT/Cyber risk assessments
• Support internal and external audits (NIS2, DORA, ISO frameworks)
• Oversee end-to-end third‑party security management ensuring regulatory and policy alignment
• Define and evolve security standards, policies, and control frameworks
• Monitor ISO27001, ISO27035, ISAE3402 certifications and ensure continuous compliance
• Support budgeting and governance of the Security program portfolio with cross‑functional coordination
• Leverage AI to enhance governance processes such as reporting and risk analysis
• Assess AI‑related risks and define governance practices aligned to regulatory requirements
• Track emerging technologies and integrate AI into security workflows
• Support alignment with cybersecurity ops through threat/vulnerability tracking and remediation monitoring
• Promote security awareness and continuous improvement of security posture

Responsabilità

• 2-5 years of experience in Security Governance, IT Risk Management, cybersecurity, or related fields
• Experience or strong interest in AI applied to security, risk, or governance
• Good understanding of AI tools and associated risks (data governance, model risk, security implications)
• Knowledge of cybersecurity principles (threat management, vulnerability management, security controls)
• In-depth knowledge of ISO27001, ISO27035, ISAE3402, DORA, NIS2
• CRISC, CISM, ISO 27001, or CISA is a plus
• Proficiency with SAP, Excel, PowerPoint
• Fluent in English; German/French a plus
• strong analytical and problem-solving skills; excellent communication and stakeholder management
• ability to work in complex, international environments

Requisiti fondamentali

• Smart working and flexible hours
• Corporate welfare system
• Meal vouchers
• Supplementary health insurance
• Well‑being initiatives
• Training and development