Join us as a IT Governance & Cybersecurity Senior Analyst

Within the IT department, the candidate will join the IT Governance & Cybersecurity team in Rome, which is responsible to ensure that Information Security and Business Continuity Management Systems operate effectively and continue to be compliant with relevant regulatory requirements, as well as voluntary best practices and standards that add a further badge of excellence among industry players.

The role will require the individual to support the team in carrying out its activities so that meets its cyber resilience objectives by identifying, protecting, detecting, and responding to cyber threats against its technology.

Main activities:

• Support in monitoring of IT risks, identifying areas of risk exposures
• Support to ISO 27001 and ISO22301 Management Systems
• Assist in reviewing IT and cybersecurity measures to safeguard ICT assets and operations
• Assist in conducting ICT asset risk assessments, including the evaluation of criticality, exposure, and dependency risks
• Support to Business Impact Analysis and Business Continuity Plan implementation
• Support to regulatory requirements DORA, ACN, NIS2, AI
• Analyses data to provide regular reports / presentations for internal and external stakeholders
• Supports the team to fulfil internal and external audits requests
• Supports the team to deliver projects and activities regarding Risk, Information Security and Business Continuity

Skills required to be successful in the role:

• Minimum 2/3 years of higher education in IT, cybersecurity, or risk management, or equivalent experience
• BSc in Cybersecurity preferred
• BSc Computer Science, Economics, International affairs, Law or equivalent
• Knowledge and passion about IT and Information Security
• Fluency in both spoken and written English
• Good knowledge of Microsoft Office Package (Word, Power Point, Excel, Outlook)
• Good written and verbal communication skills
• Precision and attention to details
• Ability to synthesize and summarize
• Ability to meet deadlines and work under pressure
• Knowledge of IT Governance, Information Security and Business Continuity frameworks (e.g. ISO/IEC 27001, ISO 22301, NIST and CIS Framework, ITIL, etc.) would be a plus
• Knowledge of GDPR, DORA, NIS/NIS2, ACN regulation would be a plus

Financial Services experience / knowledge would be a plus