IT & Security Manager

Exein S.p.a.; Roma; On-site; EUR 60,000 - 95,000; Full time

Job summary

Exein seeks an IT & Security Manager to own our IT environment, build strong security foundations and ensure compliance. This mid-level role combines IT operations with cybersecurity, including Linux systems, Google Workspace, and MDM management, while driving ISO 27001 and SOC 2 readiness.

You will work hands-on from day one, report to leadership, and grow your scope as the company scales. A pragmatic, proactive mindset and clear communication with diverse teams are essential.

Qualifications

• Past experience in IT operations, systems administration or information security.
• Solid hands-on knowledge of Linux systems.
• Hands-on experience with MDM solutions.
• Experience administering Google Workspace.
• Cybersecurity background strongly preferred.

Responsibilities

• IT Operations: Manage and improve IT infrastructure, Linux systems and internal tools; Administer Google Workspace; Manage endpoints and devices via MDM; Handle IT assets, licenses and SaaS subscriptions; Support backup and business continuity.
• Cybersecurity: Implement and maintain security controls across systems, devices, applications and cloud; Manage access control and user lifecycle; Monitor vulnerabilities and contribute to risk management; Support security incident response; Promote security awareness.
• Compliance & Audits: Maintain IT and security policies, procedures and documentation; Collect evidence and support audits (ISO 27001, SOC 2); Track remediation actions; Support security questionnaires.

Skills

Linux systems

MDM

Google Workspace

Cybersecurity

Compliance

Job description

The physical and digital worlds are merging. Vehicles, medical devices, industrial systems, critical infrastructure: security hasn't kept pace. AI is accelerating everything, from the capabilities of the systems we depend on to the sophistication of the threats targeting them. A software vulnerability can now have physical consequences. A physical breach can compromise entire digital ecosystems. Billions of devices operate with little to no protection, and traditional approaches can't keep up. Not at this scale, not at this speed, and not across this diversity of systems.
Exein exists to solve this. We build the security layer for a world where physical and digital threats are no longer separate problems, from kernel-level runtime protection on embedded devices to cloud-native platforms that analyze, protect, and prove compliance across entire device fleets. We're not patching the old model. We're building security from the core out.

About the Role

We are looking for an IT & Security Manager to own our IT environment and help us build strong security and compliance foundations.
This is a hands-on, mid-level role at the intersection of IT operations and cybersecurity. Day to day, you will run and improve our Linux systems, manage our Google Workspace environment and our devices through MDM, and put in place the security controls, policies and processes that keep the company protected and audit-ready.
Compliance is a key part of the job. You will support audits and certification activities such as ISO 27001 and SOC 2, maintaining evidence, documentation and remediation plans, and handling security questionnaires from customers, partners and investors. A background in cybersecurity is strongly valued.
You will have real ownership from day one, direct access to leadership, and room to grow your scope as the company scales. If you are a sharp, curious IT or security professional with solid technical foundations and a practical, proactive attitude, we would love to hear from you.

What You Will Do

IT Operations

• Manage and improve our IT infrastructure, Linux systems and internal tools
• Administer Google Workspace, including identity, access and security settings
• Manage endpoints and devices through our MDM solution, including onboarding and offboarding
• Handle IT assets, licenses and SaaS subscriptions, and work with IT vendors
• Support backup and business continuity processes

Cybersecurity

• Implement and maintain security controls across systems, devices, applications and cloud
• Manage access control, authentication and the user lifecycle
• Monitor vulnerabilities and contribute to risk management
• Support security incident response
• Promote security awareness across the team

Compliance & Audits

• Maintain IT and security policies, procedures and documentation
• Collect evidence and support internal and external audits and certification activities (e.g. ISO 27001, SOC 2)
• Track remediation actions through to completion
• Support security questionnaires from customers, partners and investors

Requirements

• Past experience in IT operations, systems administration or information security, ideally in a startup or tech company
• Solid hands-on knowledge of Linux systems
• Hands-on experience with MDM solutions
• Experience administering Google Workspace
• Cybersecurity background (strongly preferred)
• Experience with compliance, audits or certifications, such as contributing to policies, evidence collection or audit activities
• Autonomous and proactive, with good problem-solving skills
• Clear communication with both technical and non-technical colleagues
• Fluent English, written and spoken

Nice to Have

• Experience with cloud platforms (AWS, Azure, Google Cloud)
• Exposure to ISO 27001, SOC 2, NIST or CIS, or certifications such as ISO 27001 Lead Implementer or Security+
• Familiarity with GDPR
• Previous experience in a startup or scale-up or in a Cybersecurity environment

Exein is committed to creating an inclusive workplace. We evaluate all applications fairly regardless of gender, age, ethnicity, background, or orientation.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Exein's Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A \"disabled veteran\" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A \"recently separated veteran\" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An \"active duty wartime or campaign badge veteran\" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An \"Armed forces service medal veteran\" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

The application deadline for this role is November 22, 2026