Security Governance And Risk Manager

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7jzv8h

Randstad Digital, a specialized division for IT profiles of Randstad Italia, is searching for a Security Governance and Risk Manager to join a prestigious product company in the energy and oil & gas sector.

What We Offer

- Direct-hire, permanent contract with the client company, which promotes flexible working arrangements with a strong focus on well-being, corporate welfare, and work-life balance.
- Competitive salary range between 55.000 and 60.000 (CCNL Energia e Petrolio).
- Performance-based variable premio of 6.000.
- Corporate canteen on-site and 10 meal vouchers for remote days.
- Comprehensive corporate welfare package including supplementary health insurance and wellness services.
- Workplace: Rome (EUR Area), hybrid work model with two days a week remote.

Retribuzione annua: . Esperienza da 6 a 10 anni. Responsabilità.

Main Responsibilities

- The candidate will support all group affiliates in implementing and maintaining approved security standards across IT, operational technology, cloud, and digital environments.
- Reporting directly to the Corporate Information Security Officer (CISO), the resource will translate group security frameworks into clear policies, controls, and procedures, acting as a trusted advisor to senior leadership and local teams.
- Establishing the group-wide security risk assessment cycle.
- Monitoring affiliate security maturity.
- Supporting internal and external audit readiness.
- Actively participating in incident response procedures.

Qualifications

- Education: Master's degree, preferably in Information Security, IT,



or related STEM fields.
- Languages: Professional fluency in English (C1 level), well-established in both written and spoken communication.
- Technical Competencies: Minimum 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC).
- Proven experience in translating security frameworks into actionable policies, procedures, and controls.
- Deep understanding of major international standards and regulations such as NIS2, ISO 27001, NIST CSF, and IEC 62443.
- Strong knowledge of cloud security and modern enterprise platforms, with preferred experience in Azure and Microsoft Defender.
- Solid background in Security-by-Design practices within complex project frameworks and procurement processes.
- Familiarity with risk management frameworks, maturity programs, and security monitoring tools like SIEM, SOC, and ServiceNow.
- Relevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Auditor are highly preferred.

Il presente annuncio è rivolto a persone di genere femminile (F), maschile (M) e non binario (NB) ai sensi della Legge n. 300/1970, del Decreto Legislativo n. 198/2006 e del Decreto Legislativo n. 96/2026 ed è aperta a qualsiasi persona nel rispetto della diversity e dell'inclusività. Ti preghiamo di leggere l'informativa sulla privacy Randstad ( ai sensi dell'art. 13 del Regolamento (UE) 2016/679 sulla protezione dei dati (GDPR).

livello di studiolaurea magistrale / a ciclo unico

#J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7jzv8h