Information Security

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8q892m

h3Information Security
- Detection Response /h3 h3Location /h3 pMilano, IT /p pbContract: /b Permanent/Tempo pieno /p pbIf you've worn a pair of glasses, we've already met. /b /p pWe are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses.

We offer
our industry stakeholders in over b150 countries /b access to a global platform of high-quality vision care products (such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions), iconic brands that consumers love (such as Ray-Ban, Oakley, Persol, Oliver Peoples, Vogue Eyewear and Costa), as well as a network that offers consumers high-quality vision care and best-in-class shopping experiences (such as Sunglass Hut, LensCrafters, Salmoiraghi Viganò and the GrandVision network), and leading e-commerce platforms. /p pJoin our global community of over b190,000 /b bdedicated /b bemployees /b around the world in driving the transformation of the eyewear and eyecare industry. /p pbYour #FutureInSight with EssilorLuxottica /b /p pAre you willing to pioneer new frontiers, foster inclusivity and collaboration, embrace agility, ignite passion, and make a positive impact on the world? Join us in redefining the boundaries of whats possible. /p h3Your role /h3 pIn this role you will report directly to an Information Security Manager and you will be responsible for strengthening the Company's cyber detection and response capabilities. You will coordinate the monitoring of security events, support incident triage and investigation, drive response and containment activities with IT and business stakeholders, and contribute to the continuous improvement of use cases, playbooks, reporting and incident readiness. The role requires a strong operational security mindset,



the ability to work across geographies and functions, and a practical approach to translating security alerts and incidents into clear actions and remediation plans. /p h3Main responsibilities /h3 ul libSecurity monitoring and detection
- /bCoordinate the monitoring of security events and alerts across the Company's environment, ensuring timely identification of potential threats and suspicious activities. /li libIncident triage and investigation
- /bSupport the analysis, validation and prioritization of security incidents, working with IT Security, SOC providers and relevant stakeholders to determine impact, scope and required actions. /li libResponse coordination and containment
- /bCoordinate response activities during security incidents, supporting containment, eradication and recovery actions in alignment with internal processes and escalation paths. /li libUse case, playbook and process improvement
- /bContribute to the definition and continuous improvement of detection use cases, incident response playbooks, escalation criteria and operational procedures. /li libReporting and remediation follow-up
- /bPrepare clear incident updates and management reporting, track remediation actions, and elevate risks, delays and recurring weaknesses to the CISO / relevant stakeholders. /li /ul h3Main requirements /h3 ul liBachelor’s degree in Information Security, Information Technology, Computer Science, Engineering,



or similar strongly desired. /li liProfessional information security certifications such as CISSP, CISM, GCIH, GCIA, GCFA, Security+ or similar are strongly desired. /li liKnowledge of security monitoring, incident detection, incident response, threat analysis, endpoint security, network security, identity and access management, vulnerability management and data protection. /li liDemonstrated experience in coordinating security monitoring and incident response activities, including alert triage, investigation support, containment coordination, remediation tracking and stakeholder communication. /li liExperience with SOC operations, SIEM platforms, endpoint detection and response solutions, threat intelligence, log analysis and common attack techniques; understanding of security frameworks such as NIST, ISO 27001 and MITRE ATTCK. /li liKnowledge of incident response lifecycle, escalation models, crisis management principles, evidence handling and post-incident review practices. /li liKnowledge of relevant Information Security / Data Protection laws and regulations, including requirements that may impact incident management and notification processes. /li liAbility to translate technical security findings into clear business-oriented messages, actions and priorities for technical and non-technical stakeholders. /li liKnowledge of core IT processes, including infrastructure operations, application management, change management, access management and service management. /li liProject management skills, teamwork, individual accountability and ability to coordinate multiple stakeholders during time-sensitive situations. /li liProven ability to communicate effectively at all levels, including operational teams, management and external pro

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8q892m