Security Governance And Risk Manager
Pubblicato il 14-08-2026 - Randstad in Roma
Randstad Digital, a specialized division for IT profiles of Randstad Italia, is searching for a Security Governance and Risk Manager to join a prestigious product company in the energy and oil & gas sector.What We Offer:Direct-hire, permanent contract with the client company, which promotes flexible working arrangements with a strong focus on well-being, corporate welfare, and work-life balance.Competitive salary range between 55.000 and 60.000 (CCNL Energia e Petrolio)Performance-based variable premio of 6.000Corporate canteen on-site and 10 meal vouchers for remote daysComprehensive corporate welfare package including supplementary health insurance and wellness services.Workplace: Rome (EUR Area), hybrid work model with two days a week remote.Retribuzione annua: 50000 - 65000esperienzada 6 a 10 anniresponsabilitàMain Responsibilities:The candidate will support all group affiliates in implementing and maintaining approved security standards across IT, operational technology, cloud, and digital environments. Reporting directly to the Corporate Information Security Officer (CISO), the resource will translate group security frameworks into clear policies, controls, and procedures, acting as a trusted advisor to senior leadership and local teams. Key duties include establishing the group-wide security risk assessment cycle, monitoring affiliate security maturity, supporting internal and external audit readiness, and actively participating in incident response procedures.QualificheMandatory Academic and Language Requirements:Education Master’s degree,
preferably in Information Security, IT, or related STEM fieldsLanguages Professional fluency in English (C1 level), well-established in both written and spoken communicationTechnical Competencies:Minimum 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC)Proven experience in translating security frameworks into actionable policies, procedures, and controlsDeep understanding of major international standards and regulations such as NIS2, ISO 27001, NIST CSF, and IEC 62443Strong knowledge of cloud security and modern enterprise platforms, with preferred experience in Azure and Microsoft DefenderSolid background in Security-by-Design practices within complex project frameworks and procurement processesFamiliarity with risk management frameworks, maturity programs, and security monitoring tools like SIEM, SOC, and ServiceNowRelevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Auditor are highly preferredIl presente annuncio è rivolto a persone di genere femminile (F), maschile (M) e non binario (NB) ai sensi della Legge n. 300/1970, del Decreto Legislativo n. 198/2006 e del Decreto Legislativo n. 96/2026 ed è aperta a qualsiasi persona nel rispetto della diversity e dell'inclusività. Ti preghiamo di leggere l'informativa sulla privacy Randstad ( ai sensi dell'art. 13 del Regolamento (UE) 2016/679 sulla protezione dei dati (GDPR).Livello di studiolaurea magistrale / a ciclo unico