Kering Eyewear It Security & Compliance Officer
OverviewAs IT Security & Compliance Officer, you help safeguard our organization by driving NIS2 compliance and security governance.
You will partner with Legal, IT Infrastructure, and Group security to manage risk, reviews contracts for security and privacy, and coordinate audits and tests.
You'll stay ahead of threats and regulatory changes, shaping local security policies and incident readiness.
Join a global luxury brand and contribute to resilient, compliant technology across the group.
Retribuzione / Benefitsannual variable premio
additional benefits per company policy
CCNL-based contract for eyewear industry employees
compensation indicative initial: 50,000
ResponsabilitàLead NIS2 compliance activities: maintain control trackers, evidence collection, remediation follow-up, and incident notification support
Review security, privacy, and SLAs in IT contracts with Legal input
Coordinate with Group CISO and SOC on security initiatives and policy alignment
Perform risk assessments and vulnerability analyses; track findings to remediation and reporting
Organize vulnerability assessments and penetration tests with internal teams and external providers
Develop and maintain local Security Policies, Procedures, and Standards, including Incident Response and Disaster Recovery
Conduct periodic gap analyses against regulatory, Group,
and internal requirements
Support internal and external audits with evidence and cross-functional coordination
Stay updated on threats and regulatory developments and share insights
Requisiti fondamentaliBachelor's degree in Computer Science, Information Technology or related field or equivalent experience
3–5 years in information security, IT risk or IT compliance
Working knowledge of NIS2 and GDPR; familiarity with PCI-DSS and HIPAA is a plus
Experience reviewing IT contracts for security/privacy: SLAs, DPAs, security annexes
Understanding of core IT and security technologies: networks, firewalls, IAM, endpoint security, vulnerability management
Familiarity with ISO/IEC ***** or NIST CSF
Certifications such as ISO ***** Lead Implementer/Auditor, CompTIA Security+, CISM are a plus
Experience in multinational settings and interfacing with HQ functions is a plus
Structured, precise, and ability to drive topics to closure
Good communication skills for technical and non-technical audiences
Fluent English and Italian; travel availability
Structured and precise
Clear communicator
Ability to explain security concepts to diverse audiences
Networks and firewalls
Identity and access management
Endpoint security
You will partner with Legal, IT Infrastructure, and Group security to manage risk, reviews contracts for security and privacy, and coordinate audits and tests.
You'll stay ahead of threats and regulatory changes, shaping local security policies and incident readiness.
Join a global luxury brand and contribute to resilient, compliant technology across the group.
Retribuzione / Benefitsannual variable premio
additional benefits per company policy
CCNL-based contract for eyewear industry employees
compensation indicative initial: 50,000
ResponsabilitàLead NIS2 compliance activities: maintain control trackers, evidence collection, remediation follow-up, and incident notification support
Review security, privacy, and SLAs in IT contracts with Legal input
Coordinate with Group CISO and SOC on security initiatives and policy alignment
Perform risk assessments and vulnerability analyses; track findings to remediation and reporting
Organize vulnerability assessments and penetration tests with internal teams and external providers
Develop and maintain local Security Policies, Procedures, and Standards, including Incident Response and Disaster Recovery
Conduct periodic gap analyses against regulatory, Group,
and internal requirements
Support internal and external audits with evidence and cross-functional coordination
Stay updated on threats and regulatory developments and share insights
Requisiti fondamentaliBachelor's degree in Computer Science, Information Technology or related field or equivalent experience
3–5 years in information security, IT risk or IT compliance
Working knowledge of NIS2 and GDPR; familiarity with PCI-DSS and HIPAA is a plus
Experience reviewing IT contracts for security/privacy: SLAs, DPAs, security annexes
Understanding of core IT and security technologies: networks, firewalls, IAM, endpoint security, vulnerability management
Familiarity with ISO/IEC ***** or NIST CSF
Certifications such as ISO ***** Lead Implementer/Auditor, CompTIA Security+, CISM are a plus
Experience in multinational settings and interfacing with HQ functions is a plus
Structured, precise, and ability to drive topics to closure
Good communication skills for technical and non-technical audiences
Fluent English and Italian; travel availability
Structured and precise
Clear communicator
Ability to explain security concepts to diverse audiences
Networks and firewalls
Identity and access management
Endpoint security