Cyber Risk Analyst Milano

Cyber Risk Analyst
Milano
Lombardia, Milano

Cyber Risk Analyst

**Main responsibilities

- Support the team in the implementation and maintenance of a a risk-based approach to prioritize development of secure patterns for high-risk assets or activities.

- Cooperation with the group structures for cyber risk management activities.

- Use of the corporate cyber risk management platform to manage the cyber risk register.

- Management of Exceptions process to policies, standards, and guidelines.

- Monitoring and reviewing security controls to identify their operational effectiveness.

- Facilitate audits and remediations of any findings noted in cyber security dept.

- Support on cyber security compliance on GDPR, SOX and PCI/DSS

- Provide reporting to management for all aspects of cyber risk as required.

- Metrics and Reporting:

- Creation of reports on the status of risks, KRIs and managing communication in the Enterprise Risk Committee meetings.

- Development of visual dashboards that board directors can use to monitor risks

- Control of the effectiveness of the metrics adopted.

**Requirements**:

- Master's degree in computer science or Telecommunication Engineering.

- Knowledge of the landscape of norms and standards in the privacy / information security field (HIPAA, NY DFS, GDPR, CCPA, ISO / IEC 27000, NIST, PCI DSS, etc.

)

- Knowledge of the main Risk Management / Control Frameworks (COSO, COBIT, ISO, ITIL, NIST, FAIR, etc.

).

- Able to articulate cyber risk management concepts to a wide range of recipients.

- Excellent knowledge of cyber risk management tools and experience in using some of them.

- Excellent understanding of ICT services and architectures

- The achievement of CISSP, CISA, CISM, SANS GIAC, SABSA certifications will be considered a preferential title.

- Languages: Italian, English

**Experience

- 2-4 years working in similar role

**Soft skills

- Excellent verbal and written communication skills

- Ability to interact with all the stakeholders constructively and proactively, respecting the work needs and the role of each.

Contratto di lavoro: Tempo pieno

Disponibilità:

- Dal lunedì al venerdì

Smart working:

- In via temporanea, causa COVID-19