IT & Security Manager
About us:
The physical and digital worlds are merging. Vehicles, medical devices, industrial systems, critical infrastructure: security hasn't kept pace. AI is accelerating everything, from the capabilities of the systems we depend on to the sophistication of the threats targeting them. A software vulnerability can now have physical consequences. A physical breach can compromise entire digital ecosystems. Billions of devices operate with little to no protection, and traditional approaches can't keep up. Not at this scale, not at this speed, and not across this diversity of systems.
Exein exists to solve this. We build the security layer for a world where physical and digital threats are no longer separate problems, from kernel-level runtime protection on embedded devices to cloud-native platforms that analyze, protect, and prove compliance across entire device fleets. We're not patching the old model. We're building security from the core out.
About the Role
We are looking for an IT & Security Manager to own our IT environment and help us build strong security and compliance foundations.
This is a hands-on, mid-level role at the intersection of IT operations and cybersecurity. Day to day, you will run and improve our Linux systems, manage our Google Workspace environment and our devices through MDM, and put in place the security controls, policies and processes that keep the company protected and audit-ready.
Compliance is a key part of the job. You will support audits and certification activities such as ISO 27001 and SOC 2, maintaining evidence, documentation and remediation plans, and handling security questionnaires from customers, partners and investors. A background in cybersecurity is strongly valued.
You will have real ownership from day one, direct access to leadership, and room to grow your scope as the company scales. If you are a sharp, curious IT or security professional with solid technical foundations and a practical, proactive attitude, we would love to hear from you.
What You Will Do
IT Operations
- Manage and improve our IT infrastructure, Linux systems and internal tools
- Administer Google Workspace, including identity, access and security settings
- Manage endpoints and devices through our MDM solution, including onboarding and offboarding
- Handle IT assets, licenses and SaaS subscriptions, and work with IT vendors
- Support backup and business continuity processes
Cybersecurity
- Implement and maintain security controls across systems, devices, applications and cloud
- Manage access control, authentication and the user lifecycle
- Monitor vulnerabilities and contribute to risk management
- Support security incident response
- Promote security awareness across the team
Compliance & Audits
- Maintain IT and security policies, procedures and documentation
- Collect evidence and support internal and external audits and certification activities (e.g. ISO 27001, SOC 2)
- Track remediation actions through to completion
- Support security questionnaires from customers, partners and investors
Requirements
- Past experience in IT operations, systems administration or information security, ideally in a startup or tech company
- Solid hands-on knowledge of Linux systems
- Hands-on experience with MDM solutions
- Experience administering Google Workspace
- Cybersecurity background (strongly preferred)
- Experience with compliance, audits or certifications, such as contributing to policies, evidence collection or audit activities
- Autonomous and proactive, with good problem-solving skills
- Clear communication with both technical and non-technical colleagues
- Fluent English, written and spoken
Nice to Have
- Experience with cloud platforms (AWS, Azure, Google Cloud)
- Exposure to ISO 27001, SOC 2, NIST or CIS, or certifications such as ISO 27001 Lead Implementer or Security+
- Familiarity with GDPR
- Previous experience in a startup or scale-up or in a Cybersecurity environment
Location: Roma, Hybrid (3 days a week) - Piazzale Flaminio 19, 00196
Exein is committed to creating an inclusive workplace. We evaluate all applications fairly regardless of gender, age, ethnicity, background, or orientation.