Cybersecurity by Design AI

. ### **Overview** You will join the Cybersecurity by Design Office, whose mission is to anticipate technical and process Cybersecurity requirements from the earliest stages of a project - the so-called "shift-left approach" - so that every initiative is inherently secure from the start. You will extend this approach to the world of Artificial Intelligence, contributing to the conception, definition, update and monitoring of cybersecurity safeguards protecting projects that leverage GenAI and ML, for both the Parent Company and Legal Entities, in an international, dynamic and rapidly growing context. ### **What your activities will be** - Security assessment of AI initiatives: evaluate the security requirements of initiatives based on AI solutions, identifying domain-specific risks and defining mitigation measures - Security by Design applied to AI projects: assess the security needs of ICT initiatives with AI components from the earliest project phases, anticipating containment measures - Framework evolution: update the Cybersecurity by Design Framework by extending the potential and residual risk assessment criteria to AI-specific threats and related containment measures - Cross-functional collaboration: act as a point of reference for coordination with other functions, ensuring an integrated approach to AI risk management - Evaluation of AI solutions and vendors: as part of RFI/RFP processes, contribute to assessing the security of third-party AI solutions, platforms and services (e.g. LLM providers, MLOps platforms, AI-SPM tools) ### **Who we are looking for** If you have the following characteristics, we are waiting for you: - 3-5 years of experience in cybersecurity - familiarity with reference frameworks for AI security such as OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI Risk Management Framework and ISO/IEC 42001 - knowledge of attack scenarios, vulnerabilities and threats that can compromise banking systems and applications - knowledge of the relevant regulatory framework, including DORA and the EU AI Act - excellent command of the English language The following certifications are considered a preferential qualification: - CISSP - CSSLP - Security+ - CISM - CSX - OSCP - OSCE - OPST - OPSA - ISO 27001 - ISO 22301 - Cloud Security certifications ### **What we offer** - Gross annual salary starting from €40,000 - The Group provides for a variable component of remuneration as governed by the Remuneration Policies available on the Group website - Complementary elements governed by the National Collective Bargaining Agreement for Credit and second-level company agreements - Professional development initiatives supporting the growth of our people - Extensive training offer through the Corporate Academy dedicated to the continuous development of professional, managerial and transversal skills at all levels - Possibility to opt for flexible working and the 4x9 compressed working week - Modern and integrated corporate welfare system ([link](https://group.intesasanpaolo.com/it/careers/perche-intesa-sanpaolo/welfare-e-benefit)) - Health coverage and supplementary pension plan from the date of hiring - Benefits on the Group's banking products and services ### **Who we are** We are leaders in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society. People are at the centre; we take care of them by committing to creating an inclusive culture within the Group where everyone feels like a protagonist and valued. The Chief Security Officer Governance Area oversees physical security, cybersecurity and business continuity of the Group in an integrated way, leveraging specialist skills and advanced technological solutions, with the goal of guaranteeing high security standards at an international level. The Area includes the Security Staff, Group Security Planning & Models Monitoring, Corporate and Physical Security and Cybersecurity, Antifraud & Business Continuity Management structures, ensuring a coordinated and cross-cutting approach to protecting the Group. _Join our international reality. The future does not wait, it is chosen!_ **_#sharingfuture_** **_We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability or any other protected category, in compliance with Legislative Decrees 198/2006, 215/03 and 216/03._** _**For the evaluation of applications, the data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to review the dedicated [Privacy Notice](https://performancemanager.successfactors.eu/doc/custom/intesasanp/Information_privacy_V3.pdf).**_