Within the Group Chief Security Office function, we are looking for a talented and proactive resource to join the Group Cyber Security Operations and Platforms team.
The security of customers, employees and commercial partners data, and the continuity of our business services and activities, are one of the most important priority of Generali. We are proud to have our own in-house team of Cyber Security experts who take care of the continuous defense of Generali, both the preventive protection of products and projects, as well as the detection and defense against hackers attacks, ensuring a coordinated response to the increasing cyber security threats.
The job holder can be based both in Milan or Trieste.
Key responsibilities of the role will include:
* IT / Cyber Security Architecture Design:
ability to design end-to-end security architectures (enterprise, cloud, hybrid), translating business and risk requirements into security controls, patterns, and reference architectures
* Cloud Security Architecture:
proven experience in defining secure architectures within cloud environments (Azure, AWS, GCP), with a strong focus on Zero Trust principles, identity management, and workload and data protection
* Network & Infrastructure Security:
strong knowledge of infrastructure and network security technologies (firewalls, segmentation, VPN, NAC, IDS/IPS), with the capability to design and validate secure network architectures across complex enterprise environments
* Identity & Access Management (IAM):
expertise in defining and implementing secure identity and access management strategies (SSO, MFA, PAM), integrating on-premises and cloud directories with advanced governance models
* Application Security & DevSecOps:
ability to integrate security into development and release processes, applying secure coding principles, code review practices, and automated security controls within CI/CD pipelines
* Data Protection & Encryption:
experience in safeguarding sensitive data through encryption, key management (KMS, HSM), and Data Loss Prevention solutions, ensuring confidentiality and integrity of corporate information
* M365 Security:
in-depth knowledge of Microsoft 365 security and compliance capabilities (Defender for Office 365, Purview, Intune, Conditional Access, Information Protection), with the ability to design and harden enterprise-level M365 environments
* Security Technologies & Emerging Trends:
ability to evaluate, design, and integrate innovative security technologies (Zero Trust, SASE, Secure SD-WAN, AI-driven security), conducting technology assessments and Proof of Concepts to evolve the organization's security posture
Requirements
Our ideal candidate will meet the following requirements:
* Bachelor's or Master's Degree in Cyber Security, Computer Science, Engineering or any related field
* 5 to 8 years of experience in a similar position inside a complex, international and structured organization
* Certification related to technical security (e.g. CISSP) and willingness for continuous further qualifications in relevant topics
* Demonstrated enthusiasm for Information Security (e.g. GitHub repo, blogs, presentations, conference talks, participation participated in free skill-building / hacking challenges)
* Fluent English
Soft skills:
* Strong analytical and communications skills, and out-of-the box thinking with a problem-solving mind-set
* Ability to work in large international projects related to strategic topics and transformation initiatives
* Demonstrated ability to work effectively as part of a diverse and cohesive team of technically interested colleagues
Company Profile
Generali Group Head Office is the guidelining unit of the Generali Group, one of the largest global insurance and asset management providers. Established in 1831, Generali is present in over 50 countries in the world, with a total premium income of € 82.5 billion in 2023. With around 82,000 employees serving 70 million customers, the Group has a leading position in Europe and a growing presence in Asia and Latin America. At the heart of Generali's strategy is its Lifetime Partner commitment to customers, achieved through innovative and personalised solutions, best-in-class customer experience and its digitalised global distribution capabilities. The Group has fully embedded sustainability into all strategic choices, with the aim to create value for all stakeholders while building a fairer and more resilient society.