IT Cyber Security Manager

Join Saipem and engineer a sustainable future.

We are a global leader in engineering and construction for the energy and infrastructure sectors, delivering complex onshore and offshore projects worldwide. Driven by technological innovation as “One Company”, our 30,000 people from over 130 nationalities in more than 50 countries work every day to enable the energy transition toward Net Zero. At Saipem, we embrace diversity as a driver of innovation and inclusion, while prioritizing people’s safety and environmental sustainability, even in the most challenging conditions.

Purpose of the position: as Cybersecurity Technical Governance Professional, you will be part of the Cybersecurity Requirements, Resilience and Control (CYREC) technical unit, supporting the definition of cybersecurity strategies, policies, technical requirements and control activities aimed at improving the Company’s security posture across IT, OT and industrial environments.

In this role, you will primarily focus on translating cybersecurity governance policies in technical controls, architecture reviews and risk management activities for industrial systems on naval vessels and other operational technology environments.

The role requires the ability to translate internal policies, applicable regulations and recognized cybersecurity standards into practical technical requirements and risk-based security measures. You will work both with governance teams and operational teams, project teams, engineering functions, suppliers and other internal stakeholders throughout systems lifecycle, from design and procurement to testing, commissioning and remediation.

How can you support us? Here below your responsibilities:

• Defining cybersecurity controls to be applied to IT and OT environments, translating business need and governance and compliance requirements into technical measures and baselines.
• Supporting cybersecurity governance and compliance activities by aligning strategies, policies and technical requirements with applicable regulations and standards, including NIS2, IMO UR E26/E27, ISO/IEC 27001 and ISA/IEC 62443.
• Collaborating with internal stakeholders and external suppliers to integrate cybersecurity requirements into engineering, procurement and project processes, supporting technical clarifications and risk-based decisions.
• Performing cybersecurity risk and gap assessments and defining secure network architectures, technical specifications, hardening requirements, security controls and remediation measures for OT environments, industrial systems and project solutions, including naval vessels and autonomous marine systems.
• Supporting Tender and Commercial teams in assessing, interpreting and negotiating clients’ contractual cybersecurity requirements, ensuring their feasibility and alignment with internal cybersecurity standards, contributing to the estimation of associated compliance costs for inclusion in bid proposals, and ensuring appropriate monitoring of project execution activities.
  
  

What are we looking for?

Education: Bachelor’s or Master’s Degree in Computer Engineering, Computer Science, Cyber Security, Information Technology or equivalent disciplines.

Experience: At least 3 years of cybersecurity experience, preferably in OT, industrial, critical infrastructure or complex engineering environments, with experience in risk assessment, secure architecture design, technical specifications, system hardening, security testing or remediation, and preferably exposure to project execution, supplier management, supply chain security or marine, energy, manufacturing or defense environments.

Languages: Fluent Italian and English, both written and spoken.

Technical/IT Skills

• Good knowledge of IT/OT network architectures, segmentation, firewalls, identity and access management, endpoint protection, vulnerability management, logging and security monitoring.
• Ability to analyse technical architectures and project documentation, perform risk and gap assessments, and define clear, proportionate and verifiable cybersecurity requirements.
• Knowledge of relevant cybersecurity regulations and standards, such as NIS2, ISO/IEC 27001, ISA/IEC 62443 and NIST Cybersecurity Framework; knowledge of IMO UR E26/E27 is considered a plus.
• Familiarity with cybersecurity technologies such as Fortinet, Cisco, Palo Alto, Microsoft Defender, TxOne, Microsoft Sentinel, Nozomi or Claroty is considered an advantage.
• Cybersecurity certifications, such as ISA/IEC 62443 Cybersecurity Expert or ISO 27001 Auditor/Lead Auditor, are welcome but not mandatory.
  
  

What Can We Offer To You

• Permanent Contract– CCNL Energia e Petrolio
• Pay not lower than 43.000 €
• Corporate Benefits: We offer a comprehensive benefits package, including health insurance, internal gym, discounts and partnerships, services related to health, family, well-being, and in-house cafeteria.
• Hybrid working model: Smart Working options and flexible hours to help you achieve a better work-life balance.
• Location: Milan, Italy
  
  

Regulatory Compliance

The Decision

• is made in compliance with the principle of equal pay for the same work or work of equal value;
• complies with the pay transparency requirements set out in EU Directive 2023/970 and the relevant national implementing legislation.
  
  

Additional Information

We support your development! Do you feel you might not fit this role perfectly? If you think you can contribute to our business development in the future, don’t hesitate to apply anyway through our spontaneous application form!

PRIVACY POLICY

All interested candidates (L. 903/03) are invited to consult the privacy policy (art 13, 14, D.Lgs 196/03 and art 13 GDPR 679/16).