CYBER DEFENCE MANAGEMENT

Ariston Group; Fabriano; In loco; EUR 47.000 - 57.000; Tempo pieno

Descrizione del lavoro

Ariston Group in Italy seeks a Cyber Defence Manager to lead the team responsible for defining and executing the Group ICT security strategy, implementing and improving technical security controls, and coordinating incident response.

The role combines strategic leadership with operational accountability, ensuring cyber defence capabilities are aligned with business priorities, risk profile, and applicable compliance requirements across the Group ICT environment.

Competenze

• 8+ years of cybersecurity experience with cyber defence, security operations and vulnerability management.
• Experience leading distributed security teams and managing security service providers.
• Strong knowledge of NIST and ISO/IEC 27001 frameworks with relevant certifications a plus.
• Excellent leadership and stakeholder management with ability to translate risk to business priorities.

Mansioni

• Define and execute the Group ICT Cyber Defence strategy and roadmap.
• Lead and develop the Cyber Defence function and set priorities and operating models.
• Ensure effectiveness and continuous improvement of preventive, detective and responsive controls.
• Oversee cyber defence services, technologies and third-party providers for monitoring and incident response.
• Lead management of major cybersecurity incidents and enhance incident response playbooks.
• Establish and govern vulnerability management and threat intelligence processes.
• Define and monitor cybersecurity metrics and risk reporting to stakeholders.
• Manage relationships with vendors and service providers for quality and compliance.

Conoscenze

Cybersecurity leadership

Incident response

Vulnerability management

Threat detection

Security operations

Stakeholder management

Communication skills

Fluent English

Formazione

Relevant professional certifications (CISSP, CISM, GIAC)

Strumenti

SIEM

SOAR

EDR/XDR

Network security

Cloud security

Threat intelligence platforms

Vulnerability management

Descrizione del lavoro

We are looking for a Cyber Defence Management to lead the team responsible for defining and executing the Group ICT security strategy, implementing and improving technical security controls, managing cyber defence operations, coordinating incident response, and governing vulnerability management.

The role combines strategic leadership with operational accountability, ensuring that cyber defence capabilities are aligned with business priorities, the enterprise risk profile, and applicable regulatory and compliance requirements. The Cyber Defence Manager leads internal resources and external service providers, oversees day-to-day security operations, and drives the continuous improvement of prevention, detection, response and remediation capabilities across the Group ICT environment.

Key Responsibilities

• Define and execute the Group ICT Cyber Defence strategy and roadmap, ensuring alignment with business objectives, cybersecurity risks, architecture principles and compliance requirements.
• Lead and develop the Cyber Defence function, setting priorities, objectives, operating models and capability development plans.
• Ensure the effectiveness and continuous improvement of preventive, detective and responsive security controls across the Group's IT environment.
• Oversee cyber defence services, technologies and third-party providers, ensuring effective monitoring, threat detection, incident response and service performance.
• Lead the management of major cybersecurity incidents and drive the continuous enhancement of incident response processes, playbooks and recovery capabilities.
• Establish and govern vulnerability management and cyber threat intelligence processes, ensuring timely risk identification, prioritisation and remediation.
• Define and monitor cybersecurity operational metrics, risk indicators and reporting, providing regular updates and recommendations to the Group CISO and key stakeholders.
• Manage relationships with security vendors and service providers, ensuring service quality, contractual compliance and continuous improvement.

Required Qualifications

• At least 8 years of progressive experience in cybersecurity, with significant responsibility for cyber defence, security operations, incident response and vulnerability management, preferably within complex, global or multi-country environments.
• Proven experience leading cybersecurity teams and managing security service providers in distributed organisations; experience in industrial and OT environments is considered a plus.
• Strong knowledge of cybersecurity operations, threat detection, incident response, vulnerability management and security controls, combined with a solid understanding of enterprise IT technologies, modern security architectures and related security technologies and platforms.
• Demonstrated ability to manage high-severity incidents, drive continuous improvement initiatives, define operational processes and performance metrics, and effectively coordinate technical and business stakeholders.
• Hands-on familiarity with security technologies such as SIEM, SOAR, EDR/XDR, network security, cloud security, vulnerability management and threat intelligence platforms is preferred.
• Strong understanding of recognized cybersecurity frameworks and standards, such as NIST and ISO/IEC 27001, with relevant professional certifications (e.g. CISSP, CISM, GIAC or equivalent) considered a plus.
• Excellent leadership, communication and stakeholder management skills, with the ability to translate technical risks into business priorities.
• Fluent English proficiency, both written and spoken.

Equal opportunity, pay transparency & fairness

The compensation package will be determined based on the candidate’s experience, skills and the scope of the role, applying objective and gender-neutral criteria. We believe that transparency and fairness are essential to building trust, fostering inclusion and ensuring equal opportunities for everyone.

As a reference, for this position we offer a salary starting from €52.000 gross per year, depending on the candidate’s experience, skills and the scope of the role. This position is covered by the CCNL Metalmeccanici Industria.