Cyber Security Architect Lead

MSC Cruises; Napoli; Hybrid; EUR 50,000 - 57,000; Full time

Benefits offered by this job

Productivity award

Health Insurance

Learning opportunities

Flexible working hours

Employee Assistance Programme

Discounts & Partnerships within MSC

Job summary

MSC Cruises is seeking a Cyber Security Architect Lead to guide security architecture across infrastructure, cloud, and applications. You will partner with developers and operations to embed security-by-design, lead a team of security architects, and manage external partners to keep our environment secure, compliant, and resilient.

You will shape security strategies, review architectures, and drive risk-based decisions, while mentoring talent and collaborating with stakeholders across the

Qualifications

• Bachelor degree in computer science or engineering, cyber security, or a related qualification.
• 4+ years' experience in cyber security architecture roles (infrastructure, cloud, and applications).
• Knowledge of the design and implementation of security solutions and architectures.
• Understanding of cloud security, IAM implementations in multiple IdP environments, Zero Trust principles, and modern cloud security architectures.
• In-depth knowledge of computer networking principles.
• Knowledge of security architecture frameworks, standards, and best practices (ISO 27001, NIST, CIS, OWASP).
• Understanding of risk management fundamentals in cyber security.
• Certifications in cloud and cyber security (e.g., CISSP, CCSP) are an advantage.
• Experience with cloud development and automation: IaC, CI/CD, microservices, containers.

Responsibilities

• Define and maintain security architecture frameworks and practices per security strategy and standards.
• Provide technical leadership and mentorship to security architects and specialists.
• Review and approve security-focused solution architectures.
• Design and implement security solutions for cloud and on-prem environments.
• Collaborate with stakeholders to ensure security-by-design principles.
• Integrate security into SDLC and promote best practices.
• Review and implement IAM solutions for application integrations.
• Perform security testing, assessments, and threat modelling.
• Assess risks and provide actionable recommendations to stakeholders.
• Support vendor selection aligned with cyber security roadmap objectives.

Skills

Cyber security arch

Cloud security

IAM

Zero Trust

Networking

Security frameworks

Risk management

Leadership

Communication

Documentation

Education

BSc in Computer Science or Engineering

Tools

Cloud platforms (AWS/Azure/GCP)

CI/CD

Infrastructure as Code

Job description

Where passion meets opportunity

The best of your adventures is the one you have yet to sail!

Job Purpose

MSC Cruises is recruiting a Cyber Security Architect Lead to join its Cyber Security department. The successful candidate will have a strong background in cyber security and proven leadership capabilities. The role is responsible for planning, designing, and maintaining the security architectures across infrastructure, cloud, and application initiatives. The successful candidate will partner with engineering, infrastructure, and business stakeholders to keep our environment secure, compliant, and resilient. Working closely with a team of security architects and offensive security specialists, the Cyber Security Architect Lead will also manage external partners.

Key Accountabilities

• Define and maintain security architecture frameworks and practices in accordance with the overall security strategy, policies, standards, and evolving technological threat landscape.
• Provide technical leadership, guidance, and mentorship to security architects and specialists.
• Review and approve solution architectures from a cyber security perspective, ensuring adherence to security standards and architectural principles.
• Design and implement robust security solutions and architectures for applications and infrastructure in cloud-based and on-premises environments.
• Work independently with major stakeholders (developers, system/network administrators, product owners, etc.) to ensure security-by-design principles.
• Collaborate with development teams to integrate security into the software development lifecycle (SDLC), including vulnerability remediation and adoption of security best practices.
• Review and implement IAM solutions for application integrations.
• Validate security across MSC Cruises’ technology landscape with penetration testing, security assessments, and threat modelling.
• Assess and report security risks, provide recommendations to support informed business and technology decisions.
• Provide expertise for vendor selection processes, while ensuring alignment with the cyber security roadmap objectives.

QUALIFICATIONS (skills, Competencies, Experience)

• A degree in computer science or engineering, cyber security, or a related qualification.
• 4+ years' experience in cyber security architecture roles (infrastructure, cloud, and applications).
• Knowledge of and experience with the design and implementation of security solutions and architectures.
• Understanding of cloud security, IAM implementations in multiple IdP environments, Zero Trust principles, and modern cloud security architectures.
• In-depth and advanced knowledge of computer networking principles.
• Knowledge of security architecture frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS Controls, OWASP).
• Understanding of risk management fundamentals and their application to cyber security.
• Familiarity with AI security and governance principles is considered a plus.
• Italian as primary language and fluent English.
• Excellent technical leadership, critical thinking, and problem-solving skills.
• Excellent communication skills and the ability to report effectively and present impactfully to management.
• Adaptable and decisive individual with flexibility and a collaborative mindset.
• Ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
• Ability to document technical analysis and articulate outcomes to non-technical audiences.
• Certifications in the field of cloud and cyber security will be an advantage, such as CISSP, CCSP, GCLD, and GPCS.
• Experience with cloud development and automation is a plus: Infrastructure as Code, CI/CD pipelines, microservices architectures, and containers.

Visa Requirements

• Right to work in Italy

What We Offer

In compliance with the applicable pay transparency legislation, the following information is provided regarding the initial compensation foreseen for the position.

Contract

• Type of contract: Permanent
• Hybrid working model: 2 days per week remotely
• Applicable Collective Labour Agreement (CCNL): “Addetti agli uffici ed ai terminals delle società di navigazione che esercitano l’armamento privato” – sez. personale di terra
• Gross annual salary (RAL): between €50.000 – €57.000 gross per year, paid over 14 monthly installments
• Meal vouchers: worth €8 per on-site working day

The offer in terms of salary will be determined based on the candidate’s professional experience, technical competencies, and the level of autonomy and responsibility assigned to the role.

Welfare&Wellbeing

We offer a range of Welfare&Wellbeing Initiatives as well as benefits including Productivity award, Health Insurance, Learning opportunities, flexible working hours, Employee Assistance Programme, Discounts & Partnerships within the MSC group.

Our commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves. Our commitment extends to taking meaningful, measurable actions that have a long‑term positive impact on our guests, our employees and our planet.