IT/OT Cybersecurity Manager

Vaultica; Siziano; In loco; EUR 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Vaultica is seeking an IT/OT Cybersecurity Manager to define, engineer, implement and monitor cybersecurity standards across IT and OT networks. You will work with IT, Network, Engineering and Critical Operations to drive the company toward ISO/SOC certifications and secure its infrastructure across our EMEA footprint.

You will lead security controls, risk assessments, and incident response, coordinating with multiple teams and vendors.

Competenze

• 3+ years of OT security experience.
• 6+ years of IT security experience.
• Knowledge of IT/OT security concepts for intrusion prevention, traffic analysis and anomaly detection.
• Experience in PMO activities.
• Knowledge of industrial automation systems (IACS).
• Knowledge of DCS, PLC, SCADA and related industrial communication.
• Knowledge of industrial protocols (Modbus, BACnet, etc.).
• Knowledge of OT security standards (IEC 61850, IEC 62443, ISO 2700x).
• Experience deploying security practices such as risk assessments and monitoring in ICS environments.

Mansioni

• Define Company standards for IT/OT cybersecurity balancing requirements and costs.
• Manage suppliers and vendors (SLA, budget).
• Engineer IT/OT-related solutions for projects and operations.
• Collaborate with internal departments to implement software patching.
• Continuously assess the infrastructure, identify risks and mitigate.
• Implement and maintain security controls.
• Develop and maintain procedures.
• Monitor IT/OT platforms to identify threats and respond.
• Lead security certification processes (SOC, ISO).
• Research and recommend innovative, automated approaches.
• Travel availability mostly in EMEA; on-call availability.

Conoscenze

OT Security

IT Security

Network security

PMO experience

Industrial automation

DCS/SCADA

Industrial protocols

OT security standards

Security practices

Descrizione del lavoro

AbouttheCompany

AtVaulticawecreateaninclusiveworkplaceasthefoundationforstrongercollaboration,higherperformance,andamoreinnovativeorganization.Inclusivitymeansensuringthateveryindividual,regardlessofbackground,identity,orexperience,feelsvalued,respected,andempoweredtocontribute.It’saboutbuildingaculturewheredifferentperspectivesandexperiencesarenotonlywelcomedbutdesired.

Aninclusivecultureisbuiltoneverydaybehaviours:listeningopenly,communicatingrespectfully,andgivingeveryonetheopportunitytobeheard.Itmeanschallengingassumptions,recognizingunconsciousbiases,andmakingdecisionsthatconsiderdiverseviewpoints.Whenwecreateanenvironmentwherepeoplecanbethemselves,weunlocktheircreativity,energy,andpotential.

Inclusivityisalsoaboutfairnessandtransparency—ensuringequalaccesstoopportunities,development,andrecognition.Itrequiresleaderstosetthetonebymodellinginclusivebehaviour,anditrequiresallofustotakeresponsibilityforcontributingtoaworkplacewherecolleaguesfeelsafe,supported,andabletosucceed.

AbouttheRole

TheIT/OTCybersecurityManagerisresponsible,todefine,engineer,implementandmonitoring,procedureplatformsandbestpracticesneededtoguaranteethehigheststandardofCybersecurityforITandOTnetworkinsideVaulticaorganizationandinfrastructures.Hewillact,incoordinationwithotherIT,Network,EngineeringandCriticaloperationinorderthedrivethecompaniestoimplementcybersecuritystandards.Hewillcooperatetomaintainsecuritycertification(ISO,SOC,…).HewillactforallEMEAorganization.

Responsibilities

• DefiningCompanystandardsintermsofIT/OTCybersecuritybalancingrequirementsandcosts.
• Managingsuppliersandvendors(SLA,budget);
• EngineeringofIT/OT-relatedsolutionsforvariousprojectandoperationalneeds.
• CollaboratewithotherinternaldepartmentstodefineandimplementSWpatching.
• Continuouslyassesstheinfrastructure,identifyrisksandpropose/implementmitigationplan.
• Implementandmaintainsecuritycontrols.
• Developandmaintainprocedures.
• MonitorIT/OTplatformtoidentifythreatsandreact.
• Leadsecuritycertificationprocess(SOC,ISO).
• Researchandrecommendinnovative,andwherepossibleautomatedapproaches.
• AvailabilitytotravelmostlyinEMEA.
• Availabilitytobeoncall.

Qualifications

• 3+yearsofOTSecurityexperience.
• 6+yearsofITsecurityexperience.
• Knowledgeofaspectsconcerningnetworkandapplicationsecuritywithregardtointrusionprevention/detectionplatforms,trafficanalysisandanomalydetection.
• ExperienceinPMOactivities.
• Knowledgeofindustrialautomationsystems(IACS=IndustrialAutomationandControlSystem);
• KnowledgeofDCS,PLC,SCADAetc.andissuesrelatingtoindustrialcommunication.
• Knowledgeofnetworkandindustrialcommunicationprotocol(Modbus,Bacnet,..).
• KnowledgeofthemainStandardsinthefieldofOTSecurity(IEC61860,IEC62443,ISO2700x);
• Experiencedeployingorsupportingsecuritypracticesandtechnologiessuchasriskorvulnerabilityassessments,antivirussoftware,firewalls,intrusiondetectionsystems,centralizedalertloggingandmonitoringinICSenvironments(energycompaniesorlargemanufacturingorganizations).

RequiredSkills

• Abilitytoreportinasimpleandstructuredmode.
• Abilitytolearnquicklyandworkinanagileandfast-environment.
• Abilitytoworkinamulticulturalenvironment,collaboratively,virtually,andindependently.
• Abilitytoworkunderpressureandtotightdeadlines,managingmultipleprioritieseffectively.

EqualOpportunityStatement

Vaulticaiscommittedtodiversityandinclusivityintheworkplace.