We are looking for a technically skilled IT Security Specialist to act as the technical lead for IT security within our organization. This role serves as the key reference point for IT teams on security matters, combining hands-on technical expertise with the ability to guide and mentor others.The candidate will design, implement, and validate security controls across infrastructure and applications, support incident response activities, and ensure our IT environment remains resilient, compliant, and aligned with group security strategy.Key Responsibilities:
Serve as the technical authority on IT security within the local IT organizationDesign, implement, and validate security controls for networks, servers, endpoints, cloud services, and applicationsSupport and guide infrastructure and development teams in adopting secure configurations and practicesLead technical investigations during security incidents, including root-cause analysis and remediationPerform vulnerability assessments, penetration testing coordination, and security hardening.Collaborate with CISO/LISO to ensure alignment with group security strategy and compliance with ISO and GDPRMonitor and evaluate emerging threats and recommend appropriate defensive measures.Develop practical security guidelines and provide training to IT colleagues Qualifications:
Bachelor's or Master's degree in Computer Engineering, Information Systems, or a related fieldStrong hands-on experience with IT security technologies (firewalls, EDR/antivirus, IDS/IPS, SIEM, IAM, VPN, encryption, etc.)Knowledge of enterprise IT environments (Active Directory, M365, virtualization, cloud platforms)Proven ability to perform technical risk assessments and translate them into actionable recommendationsExperience with incident response and forensics is highly valued.Familiarity with ISO 27001 and GDPR requirementsProfessional certifications such as CISSP, CISM, CEH, OSCP, or GIAC are a plusExcellent communication skills and ability to mentor non-specialist IT colleagues Preferred Skills:
Experience with AWS, Azure, or GCP security servicesKnowledge of secure software development practicesAbility to balance independent work with collaborative team engagement WORKPLACE: VERONA, Veneto, Italia.REMOTE WORK: up to 8 days per month.