Cyber Risk Analyst

The role is part of the Cyber Security function, the candidate will be responsible for supporting the area in the adoption, management and evolution of corporate solutions in the Cyber Risk management topics and will collaborate with the corporate structures to conduct risk assessment and directing risk monitoring plans and related remediation.

Main responsibilities

• :Implement a risk-based approach to prioritize development of secure patterns for high-risk assets or activitie
• sUpdate Sky risk management process in accordance with best practices, regulations and Sky Polic
• yCooperation with the group structures for cyber risk management activitie
• sUse of the corporate cyber risk management platform to manage the cyber risk registe
• rContinuously update the risk management process in accordance with best practices and with company Polic
• yManagement of Exceptions process to policies, standards and guideline
• sMonitoring and reviewing security controls to identify their operational effectivenes
• sFacilitate audits and remediations of any findings noted in cyber security departmen
• tSupport on cyber security compliance on GDPR, NIS2 and PCI/DS
• SCyber risk posture reporting to SKY management and Committe
• eDevelopment of visual dashboards that board directors can use to monitor ris
• kControl of the effectiveness of the metrics adopte

d
Requirement

• s:Proved experience in similar roles, gained in consulting companies and / or large companies in the ICT sector in relation to cyber risk management projec
• tsMaster degree in Computer Science or Telecommunication Engineeri
• ngKnowledge of the landscape of norms and standards in the privacy / information security field (HIPAA, NY DFS, GDPR, CCPA, ISO / IEC 27000, NIST, PCI DSS, etc
• .)Knowledge of the main Risk Management / Control Frameworks (COSO, COBIT, ISO, ITIL, NIST, FAIR, etc
• .)Able to articulate cyber risk management concepts to a wide range of recipien
• tsExcellent knowledge of cyber risk management tools and experience in using some of the
• m.Excellent understanding of ICT services and architectur
• esThe achievement of CISSP, CISA, CISM, SANS GIAC certifications will be considered a preferential titl
• e.Languages: Italian, Engli

sh
Soft skil

• ls:Excellent verbal and written communication ski
• llsAbility to constructively and proactively interact with all the stakeholders, respecting the work needs and the role of ea
• ch.Flexibility, autonomy, speed; proactive and highly assertive candidate, with a strong goal orientati