Cyber and Infrastructure Security Audit Senior Specialist

. ### **Overview** Within the Chief Audit Officer Department, you will join the ICT and Security Audit team and contribute to strengthening the Group's digital resilience. The role involves audits of ICT and Cyber Security processes, applications, services and corporate infrastructure, with attention also to the cybersecurity controls of Artificial Intelligence and Generative AI solutions and emerging technologies, in an international, dynamic and innovative environment. ### **What you will do** - Carry out audits and reviews of the ICT and Cyber Security aspects of corporate applications, services and infrastructure, assessing the residual risk status. - Prepare reporting on the findings of audit activities and propose solutions to the issues identified, to improve efficiency and compliance with corporate procedures and standards. - Perform periodic follow-up activities, monitoring action plans and verifying the implementation of the agreed remediation measures. - Identify potential risks associated with innovation and digitalisation projects, including Artificial Intelligence and Generative AI solutions and emerging technologies. - Analyse cybersecurity controls relating to processes, networking, perimeter protection, cloud technologies and AI platforms. - Contribute to the identification, updating and analysis of ICT and cyber risks, interacting with the various stakeholders involved. ### **Who we are looking for** If you have the following characteristics, we are waiting for you: - In-depth knowledge of the main governance, management and control processes for Information Technology and information security; office automation tools - Excellent written and spoken English (at least B2) - In-depth knowledge of the main Artificial Intelligence platforms and technologies; security risks of AI and Generative AI solutions: prompt injection, model manipulation, data leakage, unauthorised access and improper use of information. - Master's degree in a STEM field (Computer Science, Cybersecurity or related disciplines) - In-depth knowledge of cloud technologies, including Red Hat OpenShift, Google Cloud Platform and Microsoft Azure - In-depth knowledge of the main reference frameworks COBIT, NIST and ISO standards, as well as international internal audit certifications, including CISA and CISM 3 to 5 years of experience in: Cybersecurity, IT Audit, Information Security or related activities is required. Candidates with significant professional or academic experience in international contexts will be given preference. ### **What we offer** - Gross annual salary starting from €46,000 - The Group provides a variable component of remuneration as governed by the Remuneration Policies available on the Group website - Complementary elements governed by the National Collective Labour Agreement for Credit and second-level company agreements - Professional development initiatives supporting the growth of our people - Wide training offer through the Corporate Academy, dedicated to the continuous development of professional, managerial and transversal skills at all levels - Possibility to opt for flexible working and the 4x9 compressed work week - Modern and integrated corporate welfare system ([link](https://group.intesasanpaolo.com/it/careers/perche-intesa-sanpaolo/welfare-e-benefit)) - Health coverage and supplementary pension from the date of hire - Advantages on the Group's banking products and services ### **Who we are** We are a leader in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society. People are at the centre; we take care of them by committing to create an inclusive culture within the Group in which everyone feels like a protagonist and valued. _Join our international reality. The future does not wait, it is chosen!_ **_#sharingfuture_** **_We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability or any other protected category, in compliance with Legislative Decrees 198/2006, 215/03 and 216/03._** _**For the evaluation of applications, data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to review the dedicated [Privacy Notice](https://performancemanager.successfactors.eu/doc/custom/intesasanp/Information_privacy_V3.pdf).**_