The posting
IT & Security Manager
About us:
The physical and digital worlds are merging. Vehicles, medical devices, industrial systems, critical infrastructure: security hasn't kept pace. AI is accelerating everything, from the capabilities of the systems we depend on to the sophistication of the threats targeting them. A software vulnerability can now have physical consequences. A physical breach can compromise entire digital ecosystems. Billions of devices operate with little to no protection, and traditional approaches can't keep up. Not at this scale, not at this speed, and not across this diversity of systems. Exein exists to solve this. We build the security layer for a world where physical and digital threats are no longer separate problems, from kernel-level runtime protection on embedded devices to cloud-native platforms that analyze, protect, and prove compliance across entire device fleets. We're not patching the old model. We're building security from the core out.
About the Role
We are looking for an IT & Security Manager to build and manage the technology infrastructure of our growing startup.
This is a hands-on role with broad ownership across IT infrastructure, cybersecurity, IT governance, asset management and compliance. The ideal candidate will be comfortable operating in a fast-paced environment, building processes and systems from the ground up, while also ensuring that the company’s technology environment is secure, scalable and well governed.
You will work closely with leadership and internal teams to define the company’s IT strategy, establish appropriate security standards and controls, manage IT assets and support internal and external audit activities.
Key Responsibilities
IT Infrastructure & Operations
- Design, build and manage the company’s IT infrastructure, systems and tools.
- Define and implement scalable IT processes and standards suitable for a growing startup.
- Manage identity and access management, endpoints, SaaS applications, networks and cloud infrastructure.
- Ensure the availability, reliability and security of critical IT systems.
- Manage relationships with IT vendors, technology providers and external partners.
- Establish appropriate backup, disaster recovery and business continuity processes.
Cybersecurity
- Develop and implement the company’s cybersecurity framework and security policies.
- Identify and manage IT and cybersecurity risks and vulnerabilities.
- Implement appropriate security controls across systems, devices, applications and cloud environments.
- Manage access controls, authentication, privileged access and user lifecycle processes.
- Coordinate security incident response and support the investigation and remediation of security incidents.
- Promote security awareness and best practices across the organization.
IT Governance & Compliance
- Establish and maintain IT policies, procedures and internal controls.
- Ensure appropriate governance over IT systems, data and technology-related processes.
- Maintain documentation, risk registers, policies and evidence required for compliance activities.
- Support the company in meeting relevant regulatory, contractual and security requirements.
- Work with internal stakeholders to continuously improve IT governance and control frameworks.
IT Asset Management
- Own the company’s IT asset management process, including hardware, software, licenses and SaaS subscriptions.
- Maintain an accurate inventory of IT assets and ensure appropriate ownership and lifecycle management.
- Manage procurement, deployment, maintenance and retirement of IT assets.
- Monitor software licenses and technology spend.
Audits & Assessments
- Coordinate and support internal and external IT/security audits.
- Prepare documentation and evidence required for audits and compliance assessments.
- Track audit findings, remediation plans and corrective actions through to completion.
- Support security questionnaires and due diligence processes from customers, partners and investors.
Requirements
- +5 years of experience in IT, IT infrastructure, cybersecurity or IT operations, ideally in a startup or fast-growing environment.
- Demonstrated experience in building and managing IT infrastructure from the ground up.
- Solid understanding of cybersecurity principles, IT controls and security best practices.
- Experience with identity and access management, endpoint management, cloud platforms and SaaS environments.
- Experience in IT asset management and vendor management.
- Familiarity with IT governance, risk management and compliance frameworks.
- Experience supporting or managing IT/security audits and assessments.
- Strong problem-solving and hands-on attitude, with the ability to operate independently.
- Excellent organizational and communication skills.
- Ability to work effectively with both technical and non-technical stakeholders.
- Fluent English is mandatory, both written and spoken.
Nice to Have
- Previous experience in M&A, particularly in IT due diligence, technology integration or post-merger integration.
- Experience with security/compliance frameworks such as ISO 27001, SOC 2, NIST or CIS Controls.
- Experience in a high-growth startup or scale-up environment.
- Relevant certifications such as CISSP, CISM, CISA, ISO 27001 or similar.
- Experience managing cloud environments such as AWS, Azure or Google Cloud.
- Familiarity with privacy and data protection requirements, including GDPR.
What We Are Looking For
We are looking for someone who combines technical knowledge with a strong ownership mindset. You should be comfortable being the person who builds things from scratch, establishes processes where none exist, solves problems independently and works closely with the business to make technology an enabler rather than a bottleneck. The role is ideal for someone who wants to have broad ownership of IT and Security and play a key role in building the company’s technology and governance foundations as the organization grows.
Location: Rome - Hybrid - Piazzale Flaminio 19, 00196
Salary range: €55K - €65K
Exein is committed to creating an inclusive workplace. We evaluate all applications fairly regardless of gender, age, ethnicity, background, or orientation.
