Global Cybersecurity Operations Manager

Who we are
Amplifon is an Italian multinational company and the global leader in hearing care solutions and services. More than 20,000 professionals every day, in a network of 9,500 points of sale across 24 countries, give back the joy of hearing, feeling and living to thousands of people across the world.

We believe people are the most important component of our success, and that it is only through strong investment in talent, continuous development, support and recognition that our people can exceed every limit and build a fulfilling career. Aligned to our Winning Workplace, we offer a hybrid working policy allowing employees to work 9 days/month remotely.

Role Purpose
Amplifon is looking for a Global Security Operations Manager to lead the day-to-day execution of the Group's Security Operations, ensuring effective monitoring, detection, response and continuous improvement of cybersecurity capabilities across a multinational environment.

Reporting to the Group Chief Information Security Officer (CISO) , the Global Security Operations Manager is responsible for coordinating internal cybersecurity specialists and managed security partners (SOC/MDR, NDR, endpoint protection, incident response providers and specialist vendors), ensuring efficient and resilient security operations on a global scale.

The role combines operational leadership with strong technical expertise, driving continuous improvement across security monitoring, incident response, vulnerability management and security platform operations while operating within the Group's governance and compliance framework.

Key Responsibilities
Security Operations

Manage the daily execution of the Group Security Operations across endpoint, network, identity and cloud environments.

Coordinate the Security Operations Center (SOC) and Managed Detection & Response (MDR) services, ensuring service quality and adherence to agreed SLAs.

Improve detection capabilities by developing and maintaining SIEM use cases, playbooks and security automation initiatives.

Monitor operational performance and identify opportunities for continuous improvement.

Incident Response & Cyber Resilience

Coordinate the end-to-end incident response process, including preparation, detection, containment, eradication, recovery and post-incident reviews.

Manage major security incidents in collaboration with internal stakeholders and external incident response partners.

Drive remediation activities and support initiatives aimed at strengthening cyber resilience and operational readiness.

Vulnerability & Threat Management

Manage the vulnerability management lifecycle, including identification, prioritization, remediation tracking and validation.

Support threat intelligence activities and exposure management initiatives to prioritize security risks.

Coordinate penetration testing and security assessment activities with infrastructure and application teams.

Security Engineering & Platform Operations

Oversee the operational management and continuous improvement of the Group's security technologies, including SIEM, SOAR, EDR/XDR, NDR, email security, firewalls, MFA and privileged access management.

Collaborate with infrastructure and cloud teams to implement secure configurations and security-by-design principles.

Vendor & Team Coordination

Coordinate a team of security specialists, supporting their development and ensuring effective collaboration across countries.

Manage relationships with managed security service providers and specialist vendors, monitoring service performance, escalations and operational deliverables.

Reporting & Planning

Monitor operational KPIs, SLAs and security metrics, providing regular reporting to the Group CISO.

Support budget planning, capacity planning and continuous improvement initiatives within the Security Operations function.

Governance, Risk & Compliance

Ensure Security Operations activities comply with the Group Information Security Management System (ISMS), ISO/IEC 27001, NIS2 and applicable regulations.

Support internal and external audits and contribute to maintaining compliance with security policies and standards.

Candidate Profile
Experience

6–8 years of experience in cybersecurity, including significant experience in Security O