IT System Architect - Cybersecurity Third-Party Risk Management Analyst

Join Saipem and engineer a sustainable future.

We are a global leader in engineering and construction for the energy and infrastructure sectors, delivering complex onshore and offshore projects worldwide. Driven by technological innovation as “One Company”, our 30,000 people from over 130 nationalities in more than 50 countries work every day to enable the energy transition toward Net Zero. At Saipem, we embrace diversity as a driver of innovation and inclusion, while prioritizing people’s safety and environmental sustainability, even in the most challenging conditions.

Purpose of the position:

As Cybersecurity Third-Party Risk Management Analyst you will be part of the Cyber Security Governance Department.

How can you support us?

• Support cybersecurity risk assessments of third-party engagements through the review of supplier questionnaires, supporting evidence, cybersecurity documentation and other relevant information.

• Identify, document and track cybersecurity risks, control gaps, remediation actions and compliance findings relating to suppliers and third parties, supporting follow-up activities with internal and external stakeholders.

• Assist in the monitoring of suppliers’ cybersecurity posture, including periodic reassessments, remediation tracking and other third-party risk monitoring activities.

• Support the preparation of reports, dashboards, metrics and management presentations relating to third-party cybersecurity risk exposure and remediation status.

• Contribute to the execution and continuous improvement of cybersecurity third-party risk management processes, audits, compliance activities and supplier assessment programmes, collaborating with Procurement, Vendor Management and other relevant stakeholders.

What are we looking for?

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Security, Engineering, Risk Management or related disciplines.

Background: 1–3 years of professional experience in Cybersecurity, Information Security, ICT Risk Management, Internal Audit, IT Audit, Compliance or related fields.

Languages:

• Italian: native or at least C1 proficiency.

• English: at least B2 level (written and spoken).

Technical/IT Knowledge:

• Information Security, Cybersecurity Governance & Risk Management

• Security Assessment & Documentation Analysis

• ISO 27001 & NIST Cybersecurity Framework Knowledge

• Microsoft Excel & PowerPoint Proficiency

• Data Analysis & Reporting

• GRC, TPRM & Vendor Management Platforms (nice to have)

What else should you know?

This role offers the opportunity to work in an international environment and collaborate with stakeholders across different geographies and functions worldwide.

What we can offer to you:

• Permanent Contract – CCNL Energia e Petrolio

• For home office contract: Pay not lower than 38.000 €

• Corporate Benefits: We offer a comprehensive benefits package, including health insurance, internal gym, discounts and partnerships, services related to health, family, well-being, and in-house cafeteria.

• Hybrid working model: Smart Working options and flexible hours to help you achieve a better work-life balance.

• Location: Milan, Italy

Transparency Note

At the end of the selection process, the Company reserves the right to offer a different job level and/or salary package compared to what is indicated in this job posting, in line with the candidate’s professional experience, technical and soft skills.

Any deviation shall be duly justified and documented in accordance with internal procedures and the Non-Discrimination Statement. Such deviation shall in no way be related to:

• the remuneration received by the candidate in previous employment relationships;

• any subjective or discriminatory factors, including but not limited to gender or other personal characteristics.

Regulatory Compliance

The decision is made in compliance with:

• the principle of equal pay for the same work or work of equal value;

• the pay transparency requirements set out in EU Directive 2023/970 and the relevant national implementing legislation.

Additional Information

We support your development! Do you feel you might not fit this role perfectly? If you think you can contribute to our business development in the future, don’t hesitate to apply anyway through our spontaneous application form!

All interested candidates (L. 903/03) are invited to consult the privacy policy (art 13, 14, D.Lgs 196/03 and art 13 GDPR 679/16).