Information Security & BCM Specialist

Main responsibilities:

• Support the activities related to the definition and update of Cybersecurity policies in coherence with the current legislation and Group regulations.
• Support to manage the risk of non-compliance with regulations, also considering the ESG Sustainability Framework.
• Support the process of acquisition and maintenance of the information security certifications by the Bank.
• Support on promoting and addressing the evolution and the innovation of Cybersecurity measures and solutions by assuring the definition of information security requirements.
• Support on performing evaluation of outsourcing requests and suppliers to ensure that the proposed solutions are compliant with Cybersecurity standards/policies.
• Support monitoring the external suppliers’ activities, exercising adequate operational control of the supplied services versus contracts and SLAs provisions.
• Support other corporate structures and ensure that products and projects are compliant with Cybersecurity.
• Support on defining Cybersecurity and business continuity controls and verify the proper execution of related risks management processes, including other structures first level control duties.
• Support in coordinating the definition and maintenance of the Business Continuity Plan in cooperation with the Bank structures, update the Plan at least annually and prepare the documentation related to the BCP for the Bodies of the Bank.
• Support in cooperation for the definition and update of cybersecurity policies in coherence with the current legislation and Group regulations and manage the risk of non-compliance to regulations.
• Assist in defining and updating the guidelines and rules of the Business Continuity Management in line with the Group policies, overseeing their correct implementation in cooperation with the relevant organizational structures of the Bank.
• Coordinating the annual tests of the BCP and the activation of the measures specified within the BCP.
• Assist in identifying strategies and policies related to Business Continuity, in overseeing their correct implementation and managing the Business Continuity Plan of the Bank.
• Implement, maintain and supervise the business continuity management program, aligned with industry best practices and tailored to the organization’s requirements.
• Support in the implementation and update of the enterprise risk profile BCM and actions plan to enhance the level maturity of BCM.
• Develop and plan updates of the Business Impact Analysis, Business Continuity Plans, Crisis Management Plans and develop exercises, training and review sessions for all the Bank’s business units according to the corporate BCM strategy (including establishing a schedule for their periodic update).
• Analyzing and preparing the proper documentation with recovery plans after incident.
  Support the competent functions in managing emergency process, supervising the incident communication protocol, the Group travel protocol and organize response to organizational crises, operational incidents, other critical events with internal teams.
• Support guaranteeing match of roles and duties with the access authorizations in the information system.
• Provide support in the implementation of project activities leading business continuity and disaster recovery planning components.

Skills & Qualifications:

• University Degree in Information Security, Information Technology, Computer Sciences or a related discipline.
• Preferred certifications in Cybersecurity and/or Business Continuity Management BCM Area.
• Preferred to have at least 2 years of Cybersecurity and/or Business Continuity Management (BCM) professional experience.
• Knowledge and understanding of technologies, issues and challenges related to disaster recovery, including information security, incident and change management process.
• Verbal/written communication skills (English and Italian including presentation skills with demonstrated ability to present and deliver effective education sessions, crisis management exercises at all organizational levels.
• Good organizational skills with ability to remain calm under stress.
• Good ability in analyzing and documenting test cases.