KERING EYEWEAR IT Security & Compliance Officer

Your opportunity

We are currently looking for an IT Security & Compliance Officer who will join our IT Department.

How you will contribute

• Contribute to the company’s NIS2 compliance (Italian D.Lgs. 138/2024 and ACN requirements): maintain the control and gap tracker, collect evidence, follow up on remediation actions with IT teams and support incident notification procedures.
• Review the security, privacy and service-level aspects of contracts managed by the IT Infrastructure team, working closely with the Legal department.
• Collaborate with Kering Group’s CISO and Security Operations Center, acting as the Kering Eyewear point of contact for Group security initiatives, policies and alignment activities.
• Perform risk assessments and vulnerability analyses, track findings through to remediation and report status to management.
• Coordinate vulnerability assessments and penetration tests with internal teams and external providers, from scoping to follow-up.
• Help develop and maintain local Security Policies, Procedures and Standards in line with Group guidelines, including Incident Response, Disaster Recovery and Business Continuity procedures, and contribute to their periodic testing.
• Contribute to periodic gap analyses of the organization’s information systems against regulatory, Group and internal requirements.
• Support internal and external audits, providing evidence and coordinating with IT, Privacy and Compliance functions.
• Stay up to date on emerging threats and regulatory developments and share relevant insights with the team.

Who you are

• Bachelor’s Degree in Computer Science, Information Technology or a related field, or equivalent experience.
• 3–5 years of experience in information security, IT risk or IT compliance.
• Working knowledge of NIS2 and GDPR; familiarity with PCI-DSS and HIPAA is a plus.
• Experience (or strong interest) in reviewing IT contracts from a security and privacy perspective: SLAs, DPAs, security annexes.
• Good understanding of core IT and security technologies: networks, firewalls, identity and access management, endpoint security, vulnerability management.
• Familiarity with frameworks such as ISO/IEC 27001 or the NIST Cybersecurity Framework.
• Relevant certifications (e.g. ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISM) are a plus.
• Experience working in a group or multinational structure, interfacing with headquarters functions, is a plus.
• Structured, precise and able to follow topics through to closure.
• Good communication skills, with the ability to explain security and risk concepts to both technical and non-technical audiences.
• Fluent English and Italian.
• Availability for occasional domestic and international travel.

What we offer

• CCNL applicato: contratto collettivo per gli addetti alle aziende che producono occhiali e articoli inerenti l’occhialeria
• Categoria: impiegato
• Retribuzione indicativa iniziale: € 50.000
• Bonus annuale variabile
• Benefit: oltre a quanto previsto da CCNL e dalla normativa vigente, sono previsti ulteriori benefit e iniziative conformemente alle policy aziendali in vigore

Why work with us

This is an excellent opportunity to join the Kering adventure in a moment of extraordinary growth and become part of a thriving team in a global Luxury group that offers endless possibilities to learn and grow.  

Talent development is a managerial principle at Kering and we are committed to fostering internal mobility.  Our common vision promotes leadership skills and helps every employee to reach their full potential in a stimulating and fulfilling workplace environment. 

Kering is committed to building a diverse workforce. We believe diversity in all its forms – gender, age, nationality, culture, religious beliefs and sexual orientation – enriches the workplace. It opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to adapt to a changing world. As an Equal Opportunity Employer, we welcome and consider applications from all qualified candidates, regardless of their background.