Enterprise Security Architect

As Enterprise Security Architect, you define and govern the company’s security architecture within the Enterprise Architecture team in Milan. You apply Security by Design and Zero Trust across identity, workplace, infrastructure, applications, data, and AI services, collaborating with Cybersecurity, Infrastructure, Workplace, and application teams to evolve architectures. You translate regulatory needs into verifiable controls and guide vendors to ensure secure, auditable, and resilient solutions. This role offers impact at the intersection of technology and a global fashion brand, shaping secure experiences across the business.

• smart working arrangements
• meal vouchers
• benefits under CCNL Tessile Industria

• Define and oversee IAM, IAG, SSO, Federation and Conditional Access architectures; establish privileged/non-human identity models
• Advance secure workplace integration with endpoint management, NAC and SSE/ZTNA
• Translate NIS2, AI Act, GDPR and policy requirements into architectural controls; support audits
• Identify security gaps and debt; set remediation priorities and track progress
• Ensure solutions are monitorable by SOC/MSSP and align with continuity and incident response
• Provide technical input to RFPs and selection of security technologies; lead vendors and SIs to deliver compliant solutions
• Define architectures, standards and decisions with technical stakeholders and vendors
• Deliver architectures and projects with actionable security requirements and a clear security roadmap

• Experience in Security Architecture, Cloud Architecture, or related roles
• Hands-on experience with cloud infrastructure from at least one major hyperscaler (AWS, Azure or GCP)
• Knowledge of IAM, PAM, Zero Trust, endpoint security, network security and application security
• Ability to define architectures, standards and technical decisions with stakeholders and vendors

• collaboration with cross-functional teams
• strong communication with technical and non-technical stakeholders
• technical leadership and vendor management
• Security architecture and governance
• Cloud security fundamentals (IAM, logging, data protection)
• IAM, PAM, Zero Trust, endpoint security