Security Governance And Risk Manager

Randstad; Lazio; In loco; EUR 50.000 - 65.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible working

Canteen on-site

Meal vouchers

Supplementary health insurance

Wellness services

Hybrid work (2 days remote)

Descrizione del lavoro

Randstad Digital cerca un Security Governance e Risk Manager da inserire presso un cliente leader nel settore energia. Il ruolo prevede supporto alle affiliate, definizione di policy di sicurezza, gestione del rischio e supporto agli audit.

Richiesta laurea magistrale, 7+ anni in sicurezza, conoscenza di ISO 27001/NIS2/NIST CSF e competenze cloud (Azure/Defender). Orario ibrido con due giorni di smart working, sede Roma, contratto a tempo indeterminato.

Competenze

• Laurea magistrale in informatica o campi affini richiesto.
• Inglese professionale (C1) richiesto per interfacciare con gruppi internazionali.
• Almeno 7 anni di esperienza in information security con focus GRC.
• Capacità di tradurre framework di sicurezza in policy, processi e controlli.
• Conoscenza di standard ISO 27001, NIS2, NIST CSF e IEC 62443.
• Esperienza cloud security, preferibilmente Azure e Defender.

Mansioni

• Sostenere le affiliate implementando standard di sicurezza IT, OT, cloud e digitale.
• Riportare al CISO e tradurre framework in politiche e controlli operativi.
• Stabilire un ciclo di valutazione del rischio di sicurezza su larga scala.
• Monitorare la maturità della sicurezza nelle affiliate.
• Sostenere audit interni ed esterni e preparazione.
• Partecipare attivamente alle procedure di incident response.

Conoscenze

GRC governance

Policy implementation

Incident response

Audit readiness

Cloud security

Formazione

Laurea magistrale in information security / IT

Strumenti

Azure

Microsoft Defender

ServiceNow

SIEM

NIST CSF

Descrizione del lavoro

Randstad Digital, a specialized division for IT profiles of Randstad Italia, is searching for a Security Governance and Risk Manager to join a prestigious product company in the energy and oil & gas sector.

What We Offer

• Direct-hire, permanent contract with the client company, which promotes flexible working arrangements with a strong focus on well-being, corporate welfare, and work-life balance.
• Competitive salary range between 55.000 and 60.000 (CCNL Energia e Petrolio).
• Performance-based variable bonus of 6.000.
• Corporate canteen on-site and 10 meal vouchers for remote days.
• Comprehensive corporate welfare package including supplementary health insurance and wellness services.
• Workplace: Rome (EUR Area), hybrid work model with two days a week remote.

Retribuzione annua: 50000-65000. Esperienza da 6 a 10 anni. Responsabilità.

Main Responsibilities

• The candidate will support all group affiliates in implementing and maintaining approved security standards across IT, operational technology, cloud, and digital environments.
• Reporting directly to the Corporate Information Security Officer (CISO), the resource will translate group security frameworks into clear policies, controls, and procedures, acting as a trusted advisor to senior leadership and local teams.
• Establishing the group-wide security risk assessment cycle.
• Monitoring affiliate security maturity.
• Supporting internal and external audit readiness.
• Actively participating in incident response procedures.

Qualifications

• Education: Master's degree, preferably in Information Security, IT, or related STEM fields.
• Languages: Professional fluency in English (C1 level), well-established in both written and spoken communication.
• Technical Competencies: Minimum 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC).
• Proven experience in translating security frameworks into actionable policies, procedures, and controls.
• Deep understanding of major international standards and regulations such as NIS2, ISO 27001, NIST CSF, and IEC 62443.
• Strong knowledge of cloud security and modern enterprise platforms, with preferred experience in Azure and Microsoft Defender.
• Solid background in Security-by-Design practices within complex project frameworks and procurement processes.
• Familiarity with risk management frameworks, maturity programs, and security monitoring tools like SIEM, SOC, and ServiceNow.
• Relevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Auditor are highly preferred.

Il presente annuncio è rivolto a persone di genere femminile (F), maschile (M) e non binario (NB) ai sensi della Legge n. 300/1970, del Decreto Legislativo n. 198/2006 e del Decreto Legislativo n. 96/2026 ed è aperta a qualsiasi persona nel rispetto della diversity e dell'inclusività. Ti preghiamo di leggere l'informativa sulla privacy Randstad (https://www.randstad.it/privacy/) ai sensi dell'art. 13 del Regolamento (UE) 2016/679 sulla protezione dei dati (GDPR).

livello di studiolaurea magistrale / a ciclo unico