Security Engineer (Fractional)

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8azqu8

pbThis position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer (Fractional) based in Italy. /b /ppThis is a tempo parziale security engineering opportunity focused on elevating an established technology organization toward an enterprise-grade security posture.br/ You will shape the security strategy, establish practical controls, and prioritize initiatives according to business risk and impact.br/ The role combines hands-on cloud and application security with compliance, incident readiness, policy development, and security governance.br/ You will work closely with IT leadership and engineering teams, providing mentorship and helping developers adopt safe coding and DevSecOps practices.br/ You will also support cross-border privacy and security requirements across European, Asian, and Australian operations.br/ Beyond the core organization, you will advise early-stage ventures on right-sized security frameworks and help assess security risks during investment processes.br/ This role is ideal for an experienced security professional who can operate independently, translate technical risks into practical actions, and balance strong security standards with business agility. /ph3Accountabilities /h3ullipDevelop and maintain a 12-month security roadmap that balances enterprise-grade security expectations with the speed and flexibility of a technology-focused organization. /p /lilipEstablish and maintain a security risk register, assessing risks based on business impact and prioritizing remediation efforts accordingly. /p /lilipMentor the IT Manager and help translate day-to-day technical activities into measurable security controls and improvements. /p /lilipEstablish security office hours and provide practical guidance to engineering teams on secure coding, OWASP principles, DevSecOps, and security best practices. /p /lilipAssess and strengthen security controls across cloud infrastructure, development environments, repositories, CI/CD pipelines, identity and access management, and endpoint environments.



/p /lilipEnsure data-handling practices align with applicable privacy and security regulations, including GDPR, the Philippines Data Privacy Act, and the Australian Privacy Act. /p /lilipStandardize and improve responses to client security questionnaires, audits, and vendor assessments to support efficient business development and sales processes. /p /lilipDevelop and implement practical security policies covering areas such as incident response, access control, business continuity, and disaster recovery. /p /lilipGuide the selection and implementation of essential security technologies, including endpoint detection and response, SIEM, vulnerability management, and related security tooling. /p /lilipEstablish a right-sized security framework for early-stage portfolio companies, helping founders implement foundational controls without unnecessarily slowing growth. /p /lilipEvaluate technical security, privacy, and data protection risks during assessments of potential new ventures and investment opportunities. /p /lilipAct as a fractional security advisor to startups, supporting GDPR and data privacy compliance, security policies, and the development of a security-by-design culture. /p /li /ulh3Requirements /h3ullipProven hands-on experience in security engineering, cloud security, application security, DevSecOps, or a closely related discipline, ideally within software, technology, SaaS, or outsourcing environments. /p /lilipStrong technical understanding of the software development lifecycle, CI/CD security, cloud platforms such as AWS and GCP, identity and access management, vulnerability management, and endpoint security. /p /lilipAbility to independently assess and validate security controls, including cloud configurations, GitHub repositories, CI/CD pipelines, and security tooling.



/p /lilipStrong ability to translate technical findings into practical, prioritized recommendations that teams can realistically implement. /p /lilipExperience handling client security assessments, security questionnaires, audits, vendor assessments, or similar external security reviews. /p /lilipKnowledge of governance, risk management, SOC 2, ISO 27001, GDPR, and related compliance frameworks is highly valuable. /p /lilipRelevant security certifications such as AWS or GCP certifications, CISSP, CISM, CISA, or equivalent credentials are preferred. /p /lilipExperience working with geographically distributed teams across Europe, Asia, and Australia is an advantage. /p /lilipPrevious experience supporting early-stage startups or high-growth environments is a plus. /p /lilipStrong communication, mentoring, and stakeholder-management skills, with the ability to work effectively with technical teams, leadership, and business stakeholders. /p /lilipComfortable working independently in a fractional capacity, prioritizing high-impact security initiatives without unnecessary complexity. /p /li /ulh3Benefits /h3ullipFully remote working arrangement. /p /lilipPart-time, fractional engagement designed to provide flexibility. /p /lilipOpportunity to shape and elevate an organization's security posture toward enterprise-grade standards. /p /lilipBroad exposure across cloud security, application security, DevSecOps, privacy, compliance, governance, and incident management. /p /lilipOpportunity to mentor engineering and IT professionals and influence security culture across distributed teams. /p /lilipExposure to startup environments and the opportunity to advise early-stage ventures on practical security foundations. /p /lilipOpportunity to contribute to security assessments of potential investment opportunities. /p /lilipFlexible, autonomy-focused working culture built around trust and meaningful contribution. /p /lilipInternational collaboration across Europe, Asia, and Australia. /p /lilipOpportunity to balance robust security practices with practical business and engineering needs. /p /li /ul #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8azqu8