KERING EYEWEAR IT Security

4 ore fa

limena, veneto, Italia Kering Tempo pieno
Overview

As IT Security & Compliance Officer, you help safeguard our organization by driving NIS2 compliance and security governance. You will partner with Legal, IT Infrastructure, and Group security to manage risk, reviews contracts for security and privacy, and coordinate audits and tests. You’ll stay ahead of threats and regulatory changes, shaping local security policies and incident readiness. Join a global luxury brand and contribute to resilient, compliant technology across the group.

Retribuzione / Benefits
  • annual variable bonus
  • additional benefits per company policy
  • CCNL-based contract for eyewear industry employees
  • compensation indicative initial: 50,000
Responsabilità
  • Lead NIS2 compliance activities: maintain control trackers, evidence collection, remediation follow-up, and incident notification support
  • Review security, privacy, and SLAs in IT contracts with Legal input
  • Coordinate with Group CISO and SOC on security initiatives and policy alignment
  • Perform risk assessments and vulnerability analyses; track findings to remediation and reporting
  • Organize vulnerability assessments and penetration tests with internal teams and external providers
  • Develop and maintain local Security Policies, Procedures, and Standards, including Incident Response and Disaster Recovery
  • Conduct periodic gap analyses against regulatory, Group, and internal requirements
  • Support internal and external audits with evidence and cross-functional coordination
  • Stay updated on threats and regulatory developments and share insights
Requisiti fondamentali
  • Bachelor’s degree in Computer Science, Information Technology or related field or equivalent experience
  • 3–5 years in information security, IT risk or IT compliance
  • Working knowledge of NIS2 and GDPR; familiarity with PCI-DSS and HIPAA is a plus
  • Experience reviewing IT contracts for security/privacy: SLAs, DPAs, security annexes
  • Understanding of core IT and security technologies: networks, firewalls, IAM, endpoint security, vulnerability management
  • Familiarity with ISO/IEC 27001 or NIST CSF
  • Certifications such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISM are a plus
  • Experience in multinational settings and interfacing with HQ functions is a plus
  • Structured, precise, and ability to drive topics to closure
  • Good communication skills for technical and non-technical audiences
  • Fluent English and Italian; travel availability
  • Structured and precise
  • Clear communicator
  • Ability to explain security concepts to diverse audiences
  • Networks and firewalls
  • Identity and access management
  • Endpoint security