Cyber Resilience & Third-Party Security; m​/f​/d

Cyber Resilience & Third-Party Security

We are seeking an experienced Cyber Resilience & Third-Party Security to strengthen our organization's ability to prepare for, respond to, and recover from disruptions while managing cyber risk exposure across internal operations and third-party relationships. This role is primarily focused on Business Continuity Management (BCM) and Disaster Recovery (DR), complemented by responsibilities in cyber risk assessment and vendor security risk management.

The position plays a key role in ensuring operational resilience and supporting effective risk-based decision‑making across the organization.

The role ensures that the organization can withstand and recover from cyber and operational disruptions, while maintaining visibility and control over cyber risks—both internally and across the supplier ecosystem. It acts as a bridge between resilience, risk, and security, supporting practical implementation rather than high‑level architecture or pure governance.

• Develop, maintain, and continuously improve the Business Continuity Management (BCM) framework, including policies, standards, and procedures.
• Coordinate and support Business Impact Analyses (BIA) across critical business functions.
• Define and maintain business continuity and disaster recovery plans (BCP/DRP) across IT and business units.
• Ensure alignment between business continuity requirements and IT disaster recovery capabilities (RTO, RPO, recovery strategies).
• Plan, coordinate, and execute crisis simulations, tabletop exercises, and recovery tests, including lessons learned and remediation tracking.
• Support integration between incident response, cyber crisis management, and business continuity processes.
• Monitor resilience readiness and provide reporting to senior stakeholders.

• Conduct vendor security assessments during onboarding and periodic reviews.
• Evaluate third‑party controls against internal standards and regulatory expectations.
• Support contract reviews by providing security requirements and risk input.
• Monitor third‑party risk posture and track remediation of identified issues.
• Collaborate with procurement, legal, and business stakeholders on supplier risk decisions.

• Contribute to security governance, reporting, and audit support activities.
• Support internal and external audits with relevant documentation and evidence.
• Assist in the development and improvement of security policies and procedures in areas related to resilience and risk.
• Provide input into awareness activities related to resilience and crisis preparedness.

• 7+ years of experience in cyber security with a strong focus on Business Continuity and Disaster Recovery.
• Proven hands‑on experience building and managing BCM and DR frameworks in a financial sector enterprise environment (with on‑premises and cloud environments).
• Solid understanding of:
  • Business Impact Analysis (BIA)
  • Crisis management structures and processes
  • IT disaster recovery strategies and testing
  • Resilience metrics (RTO, RPO, MTPD)
• Experience conducting or supporting third‑party/vendor security assessments.
• Familiarity with common frameworks such as:
  • ISO 22301 (Business Continuity)
  • ISO 27001
  • NIST or equivalent risk frameworks
• Strong organizational and coordination skills, with the ability to manage multiple stakeholders and activities in parallel.
• Good communication skills, with the ability to explain risks and resilience topics in a practical, business‑oriented way.

• Exposure to cyber incident response processes and integration with BCM.
• Knowledge of outsourcing and third‑party risk regulatory expectations.
• Familiarity with cloud environments and associated resilience considerations.
• Experience supporting audits or regulatory reviews.

Generali is committed to equal opportunities. We welcome you regardless of age, gender, gender identity, sexual orientation, origin, ethnicity or religion.

Your salary in this position is aligned with your earned work experience, your responsibilities within the position and local industry standards.