Group IT Security Manager
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Responsibilities:
- Translate Bolton’s security strategy into effective architectures, controls, and operational improvements
- Drive Zero Trust and secure-access initiatives from design and technical assessment through rollout and operational handover
- Define security requirements for cloud, identity, network and endpoint environments
- Partner with infrastructure and application teams to embed security into new projects and technology adoption
- Govern the managed SOC service, improving detection coverage, playbooks, escalation paths and response quality
- Coordinate IT-side incident response and specialist partners
- Validate incident-response readiness through testing
- Drive integrations between the SOC, SIEM, security platforms and ITSM
- Assess IT services and changes, prioritise vulnerabilities and coordinate remediation with IT owners
- Manage security exceptions, including risk assessment, compensating controls, expiry tracking and escalation
- Evolve SIEM/EDR, secure-access and enterprise password-management platforms
- Maintain technical standards for hardening, firewall rules, database access and software approval
- Lead security initiatives and technical supplier evaluations
- Track delivery, service quality and handover
- Maintain shared documentation and report on coverage, remediation, exceptions and progress
- Report directly to the Group IT Information Security & Infrastructure Director; no direct reports
Requirements:
- Bachelor's degree in Computer Science, Information Security, or a related field
- 5 years in IT/Cyber Security, with senior responsibility for technical initiatives or services and a track record of autonomous delivery
- Hands-on SIEM/EDR, managed SOC and incident-response experience
- Strong knowledge of vulnerability assessment, remediation and security exceptions
- Experience securing cloud, identity, endpoints and networks
- Experience applying Zero Trust and developing technical standards
- Ability to assess configurations and challenge designs
- Ability to coordinate IT teams and providers, balancing risk reduction, business continuity, cost and global scalability
- Excellent Italian and English
- Experience with Microsoft Sentinel/Defender, Azure, Entra ID or Zscaler, security automation, or multinational/FMCG environments is nice to have
- CISSP, CCSP or Microsoft security certifications are a plus
Benefits:
- Variable Pay: Yes, PPO
- Meal vouchers worth 12€ for smart working days
- Faschim health insurance plan
- Corporate welfare plan
- Flexible smart working policy
Similar Jobs
Enterprise AI Security Engineer
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.