Security Governance Manager

Prometeia is seeking a Security Governance Manager within the Corporate IT function, based in Bologna. Role and Responsibilities

The Security Governance Manager is responsible for developing, implementing, and managing information security initiatives across the entire organization. Reporting directly to the CISO, this role will serve as the main point of contact for all matters related to information security governance, including risks, threats, and vulnerabilities.

• Develop, implement, and manage information security programs across the organization, with a focus on standards such as ISO 2700x, SOC 2, CSA STAR, financial regulations (Circular 285, DORA Regulation, NIS2 Directive), and data protection laws (GDPR).
• Identify, assess, and manage information security risks effectively, ensuring that solutions comply with regulations and industry best practices.
• Oversee information security within business processes, including data management, application security, and IT infrastructure security.
• Collaborate with internal and external stakeholders to ensure regulatory compliance and effective risk management.
• Develop and maintain information security policies, procedures, and guidelines across the organization.
• Monitor and coordinate information security activities to ensure the effectiveness of implemented controls.
• Deliver training and awareness programs on information security and best practices across the organization.
• Conduct internal audits to monitor governance progress and control effectiveness.

• Degree in a STEM field, preferably Computer Science or a related discipline.
• At least 5 years of experience as a Security Governance Manager or in a similar role.
• Strong knowledge of information security regulations, standards, and industry best practices.
• Solid understanding of information security technologies and systems.
• Strong problem‑solving abilities.
• Team‑oriented, flexible, and dynamic approach.
• Excellent communication and interpersonal skills.
• Fluent in English (both written and spoken).

Prometeia offers a “Total Compensation” package that includes a fixed and variable component, a welfare plan, and various benefits to support the well‑being of employees.

Remote working flexibility is available, supporting work/life balance.

Regular training is provided—average 11 days per year—both in-person and online, with a focus on skill development and knowledge transfer.

Bologna