Senior Information Security Architect

The Senior Security Architect is responsible for designing, assessing and evolving the Group's cybersecurity architectures across enterprise networks, infrastructure, cloud environments and business applications.

The role combines strong architectural expertise with hands-on engineering capabilities, contributing to the evaluation, selection and implementation of cybersecurity technologies and solutions.

Acting as a senior technical reference within the Group Cybersecurity function, the position works closely with IT teams, cybersecurity specialists and external partners to ensure effective, consistent and sustainable security solutions.

• Design and evolve the Group's cybersecurity architectures and solutions, identifying security needs, evaluating technology options and defining appropriate technical controls.
• Provide security architecture expertise and define security requirements for new IT projects and technology initiatives at global, regional and local levels, ensuring the adoption of secure-by-design principles.
• Lead technical evaluations and Proofs of Concept (PoCs) for new cybersecurity solutions, overseeing their implementation and integration into the Group's IT environment.
• Collaborate with infrastructure, networking, cloud and application teams to ensure effective implementation of security requirements and controls.
• Assess existing IT infrastructures and architectures, identifying security weaknesses, improvement opportunities and appropriate security controls.
• Contribute to the evolution of the Group's cybersecurity technology roadmap, in alignment with the Group CISO and other cybersecurity functions.
• Lead and coordinate the activities of assigned internal personnel and external consultants, providing technical direction and overseeing deliverables.

• 8-10 years of experience in IT infrastructure, network security, security engineering or cybersecurity architecture within enterprise environments.
• Strong knowledge of enterprise networking and network security architectures, including TCP/IP, routing, switching, segmentation, firewalls, VPNs and IDS/IPS.
• Solid understanding of enterprise infrastructure, operating systems, virtualization technologies and hybrid IT environments.
• Proven experience in designing and implementing cybersecurity architectures and integrating security solutions in heterogeneous IT environments.
• Hands-on experience in evaluating, testing, configuring and troubleshooting cybersecurity technologies and platforms.
• Good understanding of identity and access management, cloud security architectures, Zero Trust principles and endpoint security.
• Knowledge of vulnerability management, security assessment methodologies and technical security controls.
• Ability to translate cybersecurity risks and requirements into practical architectural and engineering solutions.
• Professional proficiency in English, both written and spoken.

• Strong analytical thinking and problem-solving capabilities.
• Sound technical judgment and ability to constructively challenge technical decisions.
• Pragmatic, results-oriented approach, balancing security requirements, technical feasibility and business needs.
• Ability to combine architectural vision with practical technical execution.
• High degree of operational autonomy, ownership and accountability.
• Clear communication and effective collaboration with technical and non-technical stakeholders in international environments.

• Degree in Computer Science, Computer Engineering, Telecommunications Engineering or a related technical discipline.
• Master's degree or postgraduate specialization in Cybersecurity or Information Security.
• Recognized certifications in cybersecurity architecture or security engineering, such as ISC2 CISSP or ISSAP, GIAC GDSA or GCAD, Cisco CCNP Security or CCIE Security, or equivalent qualifications.
• Previous experience in multinational organizations or complex, geographically distributed IT environments.
• Experience with major cloud platforms (Microsoft Azure, AWS) and hybrid security architectures.
• Knowledge of industrial IT environments and related cybersecurity considerations.
• Familiarity with application security, secure development practices and DevSecOps principles.

Availability for occasional international travel, when required by business or project needs.

Type of contract: Permanent Full time

Location: Milan

Applicable Collective Agreement : CCNL Gomma, Plastica, Cavi elettrici e affini.

Job Level/Category in line with the applicable collective agreement.

Gross annual sa