Enterprise Security Architect

Sabceducation; Lombardia; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Meal vouchers

Smart working arrangements

Job summary

Maison Valentino is seeking an Enterprise Security Architect based in Milan. You will define and govern the company’s security architecture, ensuring design compliance for identity, data, and applications, while collaborating with Cybersecurity, Infrastructure and Workplace teams.

Responsibilities include leading IAM/SSO architectures, secure workplace evolution, and remediation planning, with a focus on audits and risk management in line with regulatory requirements.

Qualifications

• Experience in security architecture across cloud and infrastructure domains.
• Hands-on with AWS/Azure/GCP and related security controls.
• Knowledge of IAM, SSO, federation, and Zero Trust principles.

Responsibilities

• Define and govern security architectures across identity, workplace, infra and data.
• Oversee IAM, IAG, SSO, federation and conditional access architectures.
• Design access models for privileged users and third parties.
• Evolve secure workplace with endpoint management and SSE/ZTNA.
• Translate NIS2, AI Act, GDPR into architectural controls for audits.
• Identify security gaps, prioritize remediation and monitor progress.
• Ensure SOC/MSSP monitoring alignment with DR/IR plans.
• Provide input to RFPs and select security technologies and partners.
• Lead vendors and SIEs to ensure deliverables meet standards.

Skills

Security Architecture

Cloud Architecture

Infrastructure Architecture

Cloud platforms AWS/Azure/GCP

IAM

Zero Trust

Endpoint security

Network security

Job description

A career in Maison Valentino is your chance to grow in a reality where business and creativity meet and thrive in an inclusive, and open-minded community.Maison Valentino believes in a colleague-centric approach, where our contribution and behaviors as individuals are the secret of our success as a community. Each Valentino colleague is crucial to guarantee that every need in Valentino is met with mastery, creativity, uniqueness, and care.

Valentino is looking for a Enterprise Security Architectbased in Milan.

Main task activities:

Mission

The Enterprise Security Architect, as part of the Enterprise Architecture team, defines and governs the company’s security architecture. The role ensures that identity, workplace, infrastructure, applications, data, and AI services are designed according to Security by Design and Zero Trust principles, in compliance with team guidelines and regulatory requirements.

The role collaborates in particular, but not exclusively, with Cybersecurity, Infrastructure, and Workplace functions, as well as application teams, to ensure the integration and evolution of technology architectures and services.

Key Responsibilities and Activities

• Identity, Access & Workplace;
• Define and oversee IAM, IAG, SSO, Federation and Conditional Access architectures, ensuring a consistent and controlled identity lifecycle;
• Design access models for privileged users, third parties and non-human identities, translating them into; standards and requirements applicable across projects.
• Drive the evolution of a secure workplace and its integration with endpoint management, NAC and SSE/ZTNA solutions.

Compliance, Risk & Security Operations Integration

• Translate NIS2, AI Act, GDPR and company policy requirements into verifiable architectural controls, supporting audits and evidence collection;
• Identify security gaps and technical debt, define remediation priorities and monitor their progress;
• Ensure that solutions can be effectively monitored by the SOC/MSSP and are aligned with business continuity, disaster recovery and incident response requirements.
• Provide technical input to RFPs, business cases, and the selection of security technologies and partners;
• Provide technical leadership to vendors and System Integrators, ensuring the quality of deliverables, compliance with defined standards, and the implementation of any required remediation actions.

Expected Results

• Architectures and projects with clear, actionable security requirements, validated before go-live;
• Reusable standards and patterns that reduce exceptions, risks and design time;
• A prioritized security roadmap, with clear ownership, dependencies and transparent remediation progress;
• Effective collaboration with Cybersecurity, Infrastructure, Workplace, application teams and vendors, while maintaining end-to-end architectural accountability.

Job Requirements:

• Experience in Security Architecture, Cloud Architecture, Infrastructure Architecture or equivalent roles;
• Hands-on experience with cloud infrastructure and services from at least one major hyperscaler (AWS, Microsoft Azure or Google Cloud Platform), including networking, IAM, logging, data protection and security controls;
• Knowledge of IAM, PAM, Zero Trust, endpoint security, network security and application security principles;
• Ability to define architectures, standards and technical decisions, working effectively with technical stakeholders, control functions and vendors.

What We Offer

• Applicable National Collective Labor Agreement. (CCNL): Tessile Industria.
• Category: Employee.
• Benefits: in addition to those provided under the applicable National Collective Labor Agreement and by law, employees are eligible for further benefits and initiatives in accordance with Company policies, including smart working arrangements and meal vouchers.

The Valentino ecosystem is home to a wide and extraordinary pool of talents, each colleague contributing with their unique attributes, nurturing a culture of inclusivity and equality. Inspiring sense of belonging, passion and engaging colleagues are the bases of our inclusive and multifaceted world.