Security governance and risk manager (roma)

PstrongRandstad Digital /strong, a specialized division for strongIT

/strongprofiles of Randstad Italia, is searching for a strongSecurity Governance and Risk Manager /strong to join a prestigious product company in the energy and oil

gas sector. /ppbr/ppstrongMain Responsibilities /strong /ppThe candidate will support all group affiliates in implementing and maintaining approved security standards across IT, operational technology, cloud, and digital environments. Reporting directly to the Corporate Information Security Officer (CISO) , the resource will translate group security frameworks into clear policies, controls, and procedures, acting as a trusted advisor to senior leadership and local teams. Key duties include establishing the group-wide security risk assessment cycle , monitoring affiliate security maturity, supporting internal and external audit readiness, and actively participating in incident response procedures. /ppbr/ppstrongMandatory Academic and Language Requirements /strong /ppbr/pullistrongEducation /strong Master’s degree, preferably in Information Security, IT, or related STEM fields /li /ulpbr/pullistrongLanguages /strong Professional fluency in English (C1 level), well-established in both written and spoken communication /li /ulpbr/ppbr/ppstrongTechnical Competencies /strong /pulliMinimum 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC) /liliProven experience in translating security frameworks into actionable policies, procedures, and controls /liliDeep understanding of major international standards and regulations such as NIS2, ISO 27001, NIST CSF, and IEC 62443 /liliStrong knowledge of cloud security and modern enterprise platforms, with preferred experience in Azure and Microsoft Defender /liliSolid background in Security-by-Design practices within complex project frameworks and procurement processes /liliFamiliarity with risk management frameworks, maturity programs, and security monitoring tools like SIEM, SOC, and ServiceNow /liliRelevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Auditor are highly preferred /li /ulpbr/ppstrongWhat We Offer /strong /ppbr/ppDirect-hire, permanent contract with the client company, which promotes flexible working arrangements with a strong focus on well-being, corporate welfare, and work-life balance. /ppbr/pulliCompetitive salary range between strong€55.000 and €60.000 /strong (CCNL Energia e Petrolio) /liliPerformance-based variable premio of strong€6.000 /strong /liliCorporate canteen on-site and strong€10 meal vouchers /strong for remote days /liliComprehensive corporate welfare package including supplementary health insurance and wellness services. /li /ulpbr/ppstrongWorkplace: /strong Rome, hybrid work model with two days a week remote. /ppbr/ppThis position is open to candidates of any gender (L.903/77). Please read the privacy policy pursuant to Art. 13 of Regulation (EU) 2016/679 on data protection (GDPR).

/p