Security Governance Manager

Are you curious and ready to take on a new career challenge? Are you eager to join a dynamic company and bring innovation through your work and skills?

Prometeia offers opportunities for growth and training within a Group with over 1,000 professionals serving more than 500 clients in 20 countries worldwide.

Among the European leaders in Wealth Management solutions, Prometeia is seeking a Security Governance Manager within the Corporate IT function, based in Bologna.

ROLE AND RESPONSIBILITIES

The Security Governance Manager is responsible for developing, implementing, and managing information security initiatives across the entire organization. Reporting directly to the CISO, this role will serve as the main point of contact for all matters related to information security governance, including risks, threats, and vulnerabilities.

The ideal candidate is an experienced information security professional with deep knowledge of industry standards, best practices, and regulatory requirements. They should be able to collaborate effectively with security teams, as well as development and IT teams. Project Management knowledge is considered a plus.

Key Responsibilities

• Develop, implement, and manage information security programs across the organization, with a focus on standards such as ISO 2700x, SOC 2, CSA STAR, financial regulations (Circular 285, DORA Regulation, NIS2 Directive), and data protection laws (GDPR)
• Identify, assess, and manage information security risks effectively, ensuring that solutions comply with regulations and industry best practices
• Oversee information security within business processes, including data management, application security, and IT infrastructure security
• Collaborate with internal and external stakeholders to ensure regulatory compliance and effective risk management
• Develop and maintain information security policies, procedures, and guidelines across the organization
• Monitor and coordinate information security activities to ensure the effectiveness of implemented controls
• Deliver training and awareness programs on information security and best practices across the organization
• Conduct internal audits to monitor governance progress and control effectiveness

Requirements

• Degree in a STEM field, preferably Computer Science or a related discipline
• At least 5 years of experience as a Security Governance Manager or in a similar role
• Strong knowledge of information security regulations, standards, and industry best practices
• Solid understanding of information security technologies and systems
• Strong problem‑solving abilities
• Team‑oriented, flexible, and dynamic approach
• Excellent communication and interpersonal skills
• Fluent in English (both written and spoken)

LOCATION

Bologna

WHAT WE OFFER

COMPENSATION, WELFARE & BENEFIT

Our history, as well as our future, is based on the value of our people. Prometeia’s biggest investment is in our people, and it concerns every aspect of professional life. We call it “Total Compensation,” and it is made of three elements: Compensation, consisting of a fixed and a variable component, a Welfare Plan active since 2015 —we were among the first companies in Italy to introduce it—, and Benefits, including all initiatives for the well‑being of our people.

REMOTE WORKING

Flexibility is an intrinsic value of our way of working. In Prometeia, remote working is an organizational method based on trust. It results in benefits in terms of work‑life balance, environmental impact, and the optimization of company results through the autonomy and empowerment of people.

PEOPLE PROGRAM

Our evaluation system is based on the full enhancement of our people and on continuous dialogue as a stimulus for regular, mutual professional and personal growth. Within the projects, several moments are dedicated to transparent discussions between managers and team members. This allows for prompt, reciprocal feedback. The process is fully digitalized and aimed at continuously improving the strategic growth of both the individual and the company.

TRAINING

Prometeia means continuous training. We provide an average of 11 days of training per year to our people, in person and online. We pay specific attention to younger colleagues, the protagonists of dedicated growth programs, and to the continuous sharing and internal transfer of know‑how and skills. On‑the‑job training is also important and involves immediate, direct contact with the market.

WIN/WIN POLICY

If you are one of our employees and you recommend a person who is later hired, you are entitled to a financial bonus! This is an important opportunity to contribute to Prometeia's overall growth by attracting recognized market professionals and new tech talent.

We have completely digitalized the management of our physical and virtual environments through the dedicated app Pr(Home)teia. Access to the office, remote working, workstations, meeting rooms, carpooling... everything is just a click away.

COMMUNITY

Our Community is highly diverse, as are the skills of the people who are part of it and share its values, as well as the individuals and organizations directly or indirectly involved in our activities. Clients, People of the Group, Alumni, Institutions, Academia, and non‑profit entities we actively cooperate with are stakeholders who represent great value to us in terms of trust and collaboration.

DIVERSITY

We promote and respect equal opportunities and consider differences as a value. Diversity & Inclusion are fundamental values: from the recruitment phase to everyday life, they are promoted through dedicated training moments to develop individual sensitivities and uniqueness.

IMPACT

We take an active, responsible role in the environment, territories, and communities we operate in. Our Headquarters in Bologna has obtained LEED Gold Certification, one of the highest awards recognizing the building's efficiency in energy and water savings, CO2 emissions reduction, and improvements in the ecological quality of interiors, materials, and resources. In the Sustainability Report, we outline the results achieved within the 17 Sustainable Development Goals (SDGs) of the 2030 Agenda drafted by the UN in 2016, which we have been supporting since 2020.