Information Security Manager
Pubblicato il 11-08-2026 - Kühne + Nagel in Milano
It's more than a job In this IT role, you will manage, develop, and support the technology infrastructure that powers Kuehne+Nagel's global systems and operations.
This contribution is vital to making both special and ordinary moments in the lives of people a reality.
In fact, your work enables our teams to deliver fresh fruit, time-sensitive healthcare products and much more to people all around the world.
Working in IT at Kuehne+Nagel contributes to more than we imagine.As an Information Security Manager, you will play a key role in strengthening Kuehne+Nagel's cybersecurity posture by leading security governance, risk management, and compliance initiatives, with a particular focus on the implementation of the EU NIS2 Directive and its Italian transposition.
You will work closely with IT, business stakeholders, Legal, Compliance, and the EMEA Information Security organization to ensure regulatory compliance, reduce cyber risks, and drive a resilient security culture throughout the organization.
How you create impact Lead the implementation of NIS2 requirements, including gap assessments, remediation plans, and compliance monitoring.
Establish and maintain information security governance, policies, and controls aligned with Global and EMEA Information Security standards.
Conduct security risk assessments,
oversee risk treatment plans, and monitor control effectiveness.
Coordinate security incident management and regulatory reporting activities in collaboration with IT, Legal, Compliance, and cybersecurity teams.
Support internal and external audits, regulatory inspections, and compliance reviews, ensuring timely remediation of findings.
Drive third-party and supply chain security risk management, including supplier assessments and due diligence activities.
Define, monitor, and report security KPIs and risk metrics to local leadership and EMEA Information Security management.
Deliver security awareness initiatives and promote a culture of cybersecurity and compliance across the organization.
What we would like you to bring Degree in Information Security, Computer Science, Engineering, Law/Compliance, or equivalent professional experience.
Proven experience in Information Security Governance, Risk & Compliance (GRC), cybersecurity, or related security functions.
Experience implementing security frameworks and regulatory requirements, ideally NIS2, ISO *****, NIST CSF, or CIS Controls.
Strong knowledge of information security risk management, ISMS processes, and audit readiness.