Avanade

Overview

The Security Governance, Risk & Compliance Consultant will support complex security projects, contributing to the transformation of client Security Management Systems using a risk-based and security-by-design approach.

About Avanade

Avanade is a leading provider of innovative digital, cloud and advisory services, industry solutions and design-led experiences across the Microsoft ecosystem. A joint venture between Accenture and Microsoft, Avanade helps clients and their employees realize more, humanizing technology to make a genuine human impact.

Requirements & Eligibility

• 3+ years of experience in Security Governance, Risk & Compliance
• Experience in security maturity assessment and target operating model definition
• Experience in applying risk-based and security-by-design approaches
• Competence in defining and implementing security policies and procedures based on best practices or regulations
• Good knowledge of major security and compliance frameworks (e.g., ISO 27001, NIST)
• Solid technical foundation in security solutions (infrastructural, application, and/or cloud)
• Ability to interface with diverse stakeholders and conduct workshops
• Excellent communication skills in Italian and English

Key Responsibilities

• Manage security programs and ensure project timelines and quality deliverables
• Support the definition, implementation, and evolution of client Security Management Systems
• Conduct security assessments to evaluate maturity levels and define future target operating models
• Apply security-by-design principles in the development of new services, solutions, and processes
• Define, review, and implement security policies, standards, and procedures
• Facilitate workshops with business and IT stakeholders
• Collaborate on compliance programs and initiatives