Information security architect
Pubblicato il 15-08-2026 - Iaawg in Bologna
Role and Responsibilities The Information Security Architect is responsible for developing, implementing, and managing information security solutions across the entire organization. Reporting to the CISO, this role will act as a key point of reference for the delivery of information security projects across different operational areas. Develop, implement, and manage information security initiatives in line with ISO 2700x, ISO 22301, SOC 2, CSA STAR, financial regulations (Circular 285, DORA, NIS2) and data protection legislation (GDPR).
Design and contribute to the implementation and management of security solutions and components such as EDR/XDR, email security (anti‐phishing, protection and remediation processes), SASE, DLP, and Identity, ensuring proper configuration, integration, and fine‐tuning. Identify, assess, and effectively manage information security risks, translating them into technical requirements, measures, and implementable controls, while ensuring compliance with regulations and industry best practices. Collaborate with internal and external stakeholders to ensure regulatory compliance and effective information security risk management.
Develop and maintain information security policies, procedures, and guidelines for the entire organization, supporting and promoting their adoption. Monitor security design and remediation initiatives, managing milestones, dependencies, and stakeholders. Deliver training and awareness initiatives across the organization on information security and security best practices.
Support governance and audit activities (evidence collection, audit support, remediation activities, and documentation).
Requirements STEM degree in Computer Science or related disciplines. At least 5 years of experience in technical cybersecurity roles (solution design and implementation).
Strong knowledge of information security technologies and systems.
Excellent understanding of common attack techniques and vectors (phishing, credential theft, lateral movement) and familiarity with widely used operating systems. Knowledge of vulnerability management (identification, prioritization, and remediation management). Basic knowledge of incident response (triage, containment, and initial event management in collaboration with involved teams).
Basic knowledge of networking and VPN technologies. Knowledge of information security regulations, laws, and industry best practices. Operational knowledge of project management. Excellent communication and presentation skills.
Excellent written and spoken English. Industry certifications (CISSP, CCSP, ISO/IEC 27001, ITIL, PMP/PMI or equivalent) and product‐specific security certifications will be considered a strong plus.
Soft Skills
Strong problem‐solving abilities. Team‐oriented, flexible, and dynamic approach. Excellent communication and interpersonal skills. Good command of English (both written and spoken).
What We Offer Compensation, Welfare & Benefit – Total Compensation including fixed and variable components, an important Welfare Plan, and a range of benefits for employee well‐being.
Remote
Working – Flexibility with lavoro da remoto based on trust, supporting work/life balance and environmental optimization. Training – Average of 11 days of training per year, both in person and online, with focus on growth programs and knowledge sharing. Diversity & Inclusion – Promotion and respect for equal opportunities, training to develop individual sensitivities and uniqueness.
Sustainability – Commitment to environmental responsibilities, LEED Gold certification for headquarters and alignment with Sustainable Development Goals.