Security Governance and Risk Manager

Randstad; Italia; In loco; EUR 50.000 - 65.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive salary

Performance-based variable bonus

Corporate canteen

Meal vouchers for remote days

Comprehensive corporate welfare package

Descrizione del lavoro

Randstad è alla ricerca di un professionista esperto in Information Security con un solido background in governance, rischio e conformità (GRC). La posizione offre un modello di lavoro ibrido con sede a Roma, richiedendo un master in settori STEM e fluente in inglese.

Il candidato supporterà le affiliate nell'implementazione di standard di sicurezza e tradurrà i framework di sicurezza in politiche chiare, svolgendo un ruolo cruciale nella gestione del rischio e nella preparazione agli audit.

Competenze

• Master's degree in Information Security or related STEM fields.
• Professional fluency in English (C1 level).
• Minimum 7 years of experience in information security.

Mansioni

• Support all group affiliates in implementing security standards.
• Translate security frameworks into clear policies and controls.
• Establish and monitor security risk assessment cycles.
• Support internal and external audit readiness.

Conoscenze

Governance, Risk, and Compliance (GRC)

Cloud Security

Information Security Management

Security-by-Design

English (C1)

Formazione

Master’s degree in Information Security or related STEM fields

Strumenti

SIEM

SOC

ServiceNow

Microsoft Defender

Azure

Descrizione del lavoro

What We Offer

• Competitive salary range between €55.000 and €60.000 (CCNL Energia e Petrolio)
• Performance-based variable bonus of €6.000
• Corporate canteen on-site and €10 meal vouchers for remote days
• Comprehensive corporate welfare package including supplementary health insurance and wellness services.

Workplace: Rome (EUR Area), hybrid work model with two days a week remote.

Retribuzione annua: 50000€ - 65000€

Esperienza

da 6 a 10 anni

Responsabilità

The candidate will support all group affiliates in implementing and maintaining approved security standards across IT, operational technology, cloud, and digital environments. Reporting directly to the Corporate Information Security Officer (CISO), the resource will translate group security frameworks into clear policies, controls, and procedures, acting as a trusted advisor to senior leadership and local teams. Key duties include establishing the group-wide security risk assessment cycle, monitoring affiliate security maturity, supporting internal and external audit readiness, and actively participating in incident response procedures.

Qualifiche

Mandatory Academic and Language Requirements:

• Education: Master’s degree, preferably in Information Security, IT, or related STEM fields
• Languages: Professional fluency in English (C1 level), well-established in both written and spoken communication

Technical Competencies:

• Minimum 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC)
• Proven experience in translating security frameworks into actionable policies, procedures, and controls
• Deep understanding of major international standards and regulations such as NIS2, ISO 27001, NIST CSF, and IEC 62443
• Strong knowledge of cloud security and modern enterprise platforms, with preferred experience in Azure and Microsoft Defender
• Solid background in Security-by-Design practices within complex project frameworks and procurement processes
• Familiarity with risk management frameworks, maturity programs, and security monitoring tools like SIEM, SOC, and ServiceNow
• Relevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Auditor are highly preferred

Il presente annuncio è rivolto a persone di genere femminile (F), maschile (M) e non binario (NB) ai sensi della Legge n. 300/1970, del Decreto Legislativo n. 198/2006 e del Decreto Legislativo n. 96/2026 ed è aperta a qualsiasi persona nel rispetto della diversity e dell’inclusività. Ti preghiamo di leggere l’informativa sulla privacy Randstad (https://www.randstad.it/privacy/) ai sensi dell’art. 13 del Regolamento (UE) 2016/679 sulla protezione dei dati (GDPR).

livello di studio

laurea magistrale / a ciclo unico