Group IT Security Manager

We are looking for a Group IT Security Manager to join our IT Team in Bolton Group based in Milan. How you make the difference The Group IT Security Manager is responsible for translating Bolton’s security strategy into effective architectures, controls, and operational improvements. This role requires strong technical expertise, a deep understanding of information security, and the ability to lead cross-functional initiatives and collaborate with IT teams and security partners to reduce risk and support business transformation. How your agenda looks like: Zero Trust and IT security architecture: Drive Zero Trust and secure-access initiatives, from design and technical assessment to rollout and operational handover. Define security requirements for cloud, identity, network and endpoint environments, partnering with Infrastructure and application teams to embed security into new projects and technology adoption.     SOC effectiveness and incident response: Govern the managed SOC service with the team, improving detection coverage, playbooks, escalation paths and response quality. Coordinate IT-side incident response and specialist partners, validate readiness through testing, and drive integrations between the SOC, SIEM, security platforms and ITSM.  Security assurance and remediation: Assess IT services and changes, prioritise vulnerabilities and coordinate remediation with IT owners. Manage security exceptions, including risk assessment, compensating controls, expiry tracking and escalation within the agreed approval model.     Security platforms and technical standards: Evolve SIEM/EDR, secure-access and enterprise password-management platforms. Maintain technical standards for hardening, firewall rules, database access and software approval, improving control effectiveness through integration and automation. Delivery, partners and visibility: Lead security initiatives and technical supplier evaluations, tracking delivery, service quality and handover. Maintain shared documentation and report on coverage, remediation, exceptions and progress to inform priorities. Your team: You’ll directly report to our Group IT Information Security & Infrastructure Director. The role doesn’t include direct reports. What makes you a great fit: Bachelor's degree in Computer Science, Information Security, or a related field;  Experience and ownership: 5 years in IT/Cyber Security, with senior responsibility for technical initiatives or services and a track record of autonomous delivery;  Operational security expertise : Hands-on SIEM/EDR, managed SOC and incident-response experience; strong knowledge of vulnerability assessment, remediation and security exceptions; Architecture and engineering : Experience securing cloud, identity, endpoints and networks, applying Zero Trust and developing technical standards. Ability to assess configurations and challenge designs; Delivery and collaboration:…