CYBER DEFENCE MANAGEMENT

As Cyber Defence Manager, you will lead the ICT security function to define and execute the group’s cyber defence strategy. You will manage security operations, incident response, and vulnerability management across a global ICT environment, coordinating with internal teams and external providers. The role combines strategic leadership with hands-on governance to align security with business goals and regulatory requirements. You will drive continuous improvement of prevention, detection and remediation capabilities, shaping the organization’s security posture. This is an opportunity to influence security at scale within a multinational, sustainability-focused group.

• salary starting from 52.000 gross per year
• CCNL Metalmeccanici Industria
• equal opportunity and inclusive work environment

• Define and execute the Group ICT Cyber Defence strategy and roadmap aligned with business objectives, risks, architecture and compliance
• Lead and develop the Cyber Defence function, setting priorities, operating model and capability development
• Ensure effective preventive, detective and responsive security controls across the IT environment
• Oversee cyber defence services, technologies and third-party providers for monitoring, threat detection, incident response and service performance
• Lead management of major cybersecurity incidents and enhance incident response processes, playbooks and recovery capabilities
• Establish and govern vulnerability management and cyber threat intelligence processes, ensuring timely risk identification and remediation
• Define and monitor cybersecurity operational metrics, risk indicators and reporting to the Group CISO and stakeholders
• Manage relationships with security vendors and service providers for quality and continuous improvement

• At least 8 years of progressive cybersecurity experience with responsibility for cyber defence, security operations, incident response and vulnerability management
• Proven experience leading cybersecurity teams and managing security service providers in distributed organisations; industrial/OT experience is a plus
• Strong knowledge of security operations, threat detection, incident response, vulnerability management and security controls
• Proven ability to manage high-severity incidents and drive continuous improvement, with defined processes and metrics
• Hands-on familiarity with SIEM, SOAR, EDR/XDR, network and cloud security and threat intelligence platforms (preferred)
• Understanding of NIST and ISO/IEC 27001 frameworks; relevant certifications (CISSP, CISM, GIAC or equivalent) considered a plus
• Excellent leadership, communication and stakeholder management; ability to translate risks into business priorities
• Fluent English (written and spoken)

• leadership
• stakeholder management
• clear communication
• SIEM
• SOAR
• EDR/XDR