Group IT Security Manager

This is a fully remote position, open to applicants in Italy.

📋 Description

• Convert Bolton’s security strategy into actionable architectures, controls, and operational enhancements.

• Lead Zero Trust and secure-access projects from design and technical evaluation through implementation and operational transition.

• Establish security requirements across cloud, identity, network, and endpoint environments.

• Collaborate with infrastructure and application teams to integrate security into new initiatives and technology adoption.

• Oversee the managed SOC service, enhancing detection capabilities, playbooks, escalation procedures, and response quality.

• Coordinate incident response on the IT side and with specialized partners.

• Assess the preparedness for incident response through testing.

• Facilitate integrations between the SOC, SIEM, security platforms, and ITSM.

• Evaluate IT services and changes, prioritize vulnerabilities, and manage remediation efforts with IT owners.

• Administer security exceptions, including risk assessments, compensating controls, expiry tracking, and escalation processes.

• Advance SIEM/EDR, secure-access, and enterprise password-management solutions.

• Uphold technical standards for hardening, firewall configurations, database access, and software approvals.

• Spearhead security initiatives and evaluate technical suppliers.

• Monitor delivery, service quality, and transitions.

• Maintain shared documentation and provide reports on coverage, remediation, exceptions, and progress updates.

• Report directly to the Group IT Information Security & Infrastructure Director; this position does not have direct reports.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related discipline.

• Minimum of 5 years in IT/Cyber Security, with senior responsibility for technical projects or services and a proven ability to deliver independently.

• Practical experience with SIEM/EDR, managed SOC, and incident response.

• In-depth knowledge of vulnerability assessment, remediation, and management of security exceptions.

• Experience in securing cloud environments, identity management, endpoints, and networks.

• Familiarity with Zero Trust principles and the development of technical standards.

• Capability to evaluate configurations and challenge design choices.

• Strong coordination skills with IT teams and providers, balancing risk mitigation, business continuity, cost, and global scalability.

• Proficient in both Italian and English.

• Experience with Microsoft Sentinel/Defender, Azure, Entra ID, or Zscaler, security automation, or multinational/FMCG environments is desirable.

• CISSP, CCSP, or Microsoft security certifications are advantageous.

🏝️ Benefits

• Variable Pay: Yes, PPO.

• Meal vouchers valued at 12€ for smart working days.

• Faschim health insurance plan.

• Corporate welfare plan.

• Flexible smart working policy.