security governance and risk manager

Main Responsibilities:

The candidate will support all group affiliates in implementing and maintaining approved security standards across IT, operational technology, cloud, and digital environments. Reporting directly to the Corporate Information Security Officer (CISO) , the resource will translate group security frameworks into clear policies, controls, and procedures, acting as a trusted advisor to senior leadership and local teams. Key duties include establishing the group-wide security risk assessment cycle , monitoring affiliate security maturity, supporting internal and external audit readiness, and actively participating in incident response procedures.

Mandatory Academic and Language Requirements:

•  

  Education Master’s degree, preferably in Information Security, IT, or related STEM fields

•  

  Languages Professional fluency in English (C1 level), well-established in both written and spoken communication

Technical Competencies:

• Minimum 7 years of experience in information security, with a strong focus on governance, risk, and compliance (GRC)

• Proven experience in translating security frameworks into actionable policies, procedures, and controls

• Deep understanding of major international standards and regulations such as NIS2, ISO 27001, NIST CSF, and IEC 62443

• Strong knowledge of cloud security and modern enterprise platforms, with preferred experience in Azure and Microsoft Defender

• Solid background in Security-by-Design practices within complex project frameworks and procurement processes

• Familiarity with risk management frameworks, maturity programs, and security monitoring tools like SIEM, SOC, and ServiceNow

• Relevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Auditor are highly preferred

Il presente annuncio è rivolto a persone di genere femminile (F), maschile (M) e non binario (NB) ai sensi della Legge n. 300/1970, del Decreto Legislativo n. 198/2006 e del Decreto Legislativo n. 96/2026 ed è aperta a qualsiasi persona nel rispetto della diversity e dell'inclusività. Ti preghiamo di leggere l'informativa sulla privacy Randstad (https://www.randstad.it/privacy/) ai sensi dell'art. 13 del Regolamento (UE) 2016/679 sulla protezione dei dati (GDPR).