Cyber Security Specialist
Pubblicato il 24-09-2026 - Volkswagen Group Italia in Verona
We are looking for a technically skilled Cyber Security Specialist to act as the technical lead for IT security within our organization. This role serves as the key reference point for IT teams on security matters, combining hands‑on technical expertise with the ability to guide and mentor others.
The candidate will design, implement, and validate security controls across infrastructure and applications, support incident response activities, and ensure our IT environment remains resilient, compliant, and aligned with group security strategy.
Key Responsibilities
- Serve as the technical authority on IT security within the local IT organization
- Design, implement, and validate security controls for networks, servers, endpoints, cloud services, and applications
- Support and guide infrastructure and development teams in adopting secure configurations and practices
- Lead technical investigations during security incidents, including root‑cause analysis and remediation
- Perform vulnerability assessments, penetration testing coordination, and security hardening.
- Collaborate with CISO/LISO to ensure alignment with group security strategy and compliance with ISO and GDPR
- Monitor and evaluate emerging threats and recommend appropriate defensive measures.
- Develop practical security guidelines and provide training to IT colleagues
Qualifications
- Bachelor’s or Master’s degree in Computer Engineering, Information Systems, or a related field
- Strong hands‑on experience with IT security technologies (firewalls, EDR/antivirus, IDS/IPS, SIEM, IAM, VPN, encryption, etc.)
- Knowledge of enterprise IT environments (Active Directory, M365, virtualization, cloud platforms)
- Proven ability to perform technical risk assessments and translate them into actionable recommendations
- Experience with incident response and forensics is highly valued.
- Familiarity with ISO 27001 and GDPR requirements
- Professional certifications such as CISSP, CISM, CEH, OSCP, or GIAC are a plus