Cyber Security Governance

Join an agile team where you can enhance your technical skills by participating in challenging and scalable projects in the field of software development. In a fast-paced development environment focused on growth and innovation, you will be responsible for translating requirements into code to create, improve and maintain high-quality software.

Responsibilities

Drive the continuous improvement of the organization's application security maturity, defining a structured and scalable approach to secure software development across teams and products; Define, measure, and track key security KPIs related to vulnerability management processes (e.g. detection, remediation, exposure time), providing visibility on risk and progress over time; Lead application security initiatives across the organization, implementing security-by-design principles from the early stages of development; Contribute to the definition and evolution of security controls and practices, maintaining alignment with internal standards, regulatory requirements, and industry frameworks; Collaborate with Product Owners and development teams to align security objectives with business priorities and promote a shared security culture throughout the software development lifecycle; Hands-on Application Security role (non-GRC) requiring strong expertise in software security, secure architecture, threat modeling, and secure development practices; Collaborate closely with engineering teams to define and implement security best practices across the software development lifecycle; Translate requirements into code to create, improve and maintain high-quality software

Requirements

Good knowledge of application security frameworks such as SAMM, ASVS, NIST CSF, and similar; Understanding of certification standards like ISO 27000, as well as NIS2, DORA, ACN guidelines, PCI-DSS, and their impact on application security; Understanding of AI-related risks, key facts, and ecosystem dynamics, paired with strong curiosity and continuous awareness of the current and emerging AI technological landscape; Strong knowledge of application security design principles, such as input filtering, data encryption (in transit and at rest), authentication/authorization frameworks, and secure-by-design best practices; Advanced proficiency in English (C1 level)

Nice to have

Knowledge of AI-focused risk and security frameworks, including NIST AI RMF, EU AI Act requirements, ISO/IEC 23894, OWASP Top 10 for LLMs, and Google SAIF; Prior experience as a software developer or security engineer, with hands-on understanding of the software development lifecycle (SDLC) and the ability to read/review code; Familiarity with application security testing methodologies (SAST, DAST, penetration testing, dependency/vulnerability scanning)

Benefits

4-day week (one extra day every week); Total compensation including a variable component linked to performance; Wellbeing Digital Wallet from € 3.850 per year for travel, medical expenses, parental support, sports, and reimbursements for personal services such as childcare and caregiving; Hybrid work model with autonomy over when to come into the office; Tailored learning paths and development opportunities within an international group; Inclusive workplace built on trust, collaboration, and diverse perspectives