Cyber Security Manager

Job profile: Cyber Security Manager

DESCRIPTION OF THE ROLE:

Skills requirements

• Looking for at least 6 to 15 Years experience solely in the cybersecurity / IT security / data security

• Experience:
• Significant professional experience in the field of information security, risk management, or cybersecurity.
• For example, "Risk Management," means: Conducting regular risk assessments using some methodologies, developing and maintaining a risk register, and presenting risk reports to senior management etc.
• In the past they may have worked in various roles such as security analyst, security architect, security consultant.
• Technical Knowledge:
• Strong understanding of network security, applications, and operating system security.
• a strong technical background and stay up-to-date with the latest security technologies and threat landscape
• Proficiency in security protocols and technologies (e.g., firewalls, VPNs, intrusion detection and prevention systems).
• Should possess knowledge of networking, systems, applications, encryption, cloud security, identity and access management, and other cybersecurity domains.
• Hands-on experience in OT/ICS (Operational Technology / Industrial Control Systems) security is mandatory. The candidate must demonstrate knowledge of securing manufacturing environments, SCADA systems, PLCs, and industrial networks, and be familiar with frameworks such as IEC 62443 and NIST SP 800-82.
• Business alignment:
• They should be able to align security strategies with the overall business objectives and make risk-informed proposal.
• Risk Management:
• Experience in risk analysis, risk management frameworks (such as NIST, ISO 27001), and vulnerability assessment.
• Incident Response:
• Skills in developing and managing incident response plans and conducting post-incident analysis.
• Compliance and Regulatory Knowledge:
• Understanding of relevant legal and regulatory frameworks such as GDPR, HIPAA, PCI-DSS, NIS2 and industry-specific compliance requirements
• Leadership and Management Skills:
• Ability to lead and manage security teams, projects, and initiatives.
• Strong decision-making and problem-solving abilities.
• Must have a demonstrated and traceable history of managing security teams (people management), with evidence of hiring, mentoring, and performance management responsibilities. Candidates without verifiable team management history will not be considered.
• Experience in managing cybersecurity budgets: planning, allocation, and reporting of security investments to senior management and executive stakeholders.
• Industry certification:
• Should hold certifications. For instance: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified Cloud Security Professional (CCSP).
• Management of high-stress situations:
• They must be able to think rationally and make decisions, even with business impacts (such as shutting down core systems) in highly stressful situations (e.g., an ongoing cyber-attack).
• Communication Skills:
• Excellent verbal and written communication skills for reporting incidents and presenting to stakeholders.
• They should be able to effectively communicate complex security concepts to different audiences, including executives, employees, and external stakeholders.
• Cybersecurity Roadmap Design (Manufacturing):
• The candidate must be able to jointly design and drive a cybersecurity roadmap specifically for a manufacturing environment, in close collaboration with the Group CISO. This includes defining priorities, milestones, investment needs, and maturity improvement targets across both IT and OT domains.
• Autonomy and Self-Sufficiency:
• Given the current operational context of the Group in 2026, the candidate must be able to operate independently with minimal onboarding and support. The ability to quickly assess the environment, identify priorities, and take ownership without extensive hand-holding is essential.

Additional Skills

• Cloud Security:
• Knowledge of securing cloud environments and platforms (e.g., AWS, Azure, Google Cloud).
• Threat Intelligence:
• Skills in threat monitoring, analysis, and the ability to adapt to emerging security threats.
• Data Protection:
• Understanding of data encryption, data loss prevention, and privacy issues.
• Forensics:
• Knowledge of digital forensics techniques and tools for investigating security breaches.
• Project Management:
• Familiarity with project management methodologies (e.g., Agile, Scrum) to oversee security projects effectively.
• Training and Awareness:
• Ability to develop and conduct security awareness training programs for staff.
• Collaboration:
• Skills in working collaboratively with other departments to ensure comprehensive security measures.

Preferred Skills:

• Experience with specific compliance frameworks: (e.g., NIST Cybersecurity Framework, ISO 27001, HIPAA, GDPR, PCI DSS, etc.) depending on the industry

Personal Abilities/ Skills

• Good Communication Skills
• Learning skills
• Take ownership of activities.
• Self-motivated and creative
• Flexible to work in shifts.

Foreign Languages :If any Italian, added advantages

Years of Experience: Minimum 6 - 10+ years of experience in the IT security / data security

Preferred Skills:Collaboration with other team members, for Integration.

Personal Abilities/ Skills:Excellent written and spoken communication skills in English