Cyber Defence Lead: Strategy, Incidents & Security Ops

Ariston Holding N.V.; Milano; On-site; EUR 47,000 - 57,000; Full time

Job summary

Ariston Group is seeking a Cyber Defence Lead to define and execute the Group ICT security strategy, oversee security operations, and coordinate incident response across global environments.

You will manage internal teams and external providers, drive continuous improvement of prevention, detection and remediation, and align security with business priorities and regulatory requirements.

Qualifications

• At least 8 years of progressive cybersecurity experience.
• Experience leading cybersecurity teams and service providers.
• Strong knowledge of cybersecurity operations, threat detection and vulnerability management.
• Hands-on with SIEM, SOAR, EDR/XDR and related security tech.
• Familiarity with NIST and ISO/IEC 27001; professional certifications are a plus.
• Fluent English, written and spoken.

Responsibilities

• Define and execute the Group ICT Cyber Defence strategy and roadmap.
• Lead Cyber Defence function; set priorities, objectives and operating models.
• Ensure preventive, detective and responsive security controls across IT.
• Oversee cyber defence services, vendors, monitoring and performance.
• Lead major cybersecurity incident management and recovery processes.
• Establish vulnerability management and threat intelligence processes.
• Define metrics and reporting to the Group CISO and stakeholders.
• Manage relationships with security vendors and service providers.

Skills

Cybersecurity leadership

Incident response

Vulnerability management

Security operations

Threat detection

Education

CISSP

CISM

GIAC

Tools

SIEM

SOAR

EDR/XDR

Network security

Cloud security

Threat intelligence platforms

Job description

Ariston Group is seeking a Cyber Defence Lead to define and execute the Group ICT security strategy, oversee security operations, and coordinate incident response across global environments.

You will manage internal teams and external providers, drive continuous improvement of prevention, detection and remediation, and align security with business priorities and regulatory requirements.