Group IT Security Manager

• Translate Bolton’s security strategy into effective architectures, controls, and operational improvements
• Drive Zero Trust and secure-access initiatives from design and technical assessment through rollout and operational handover
• Define security requirements for cloud, identity, network and endpoint environments
• Partner with infrastructure and application teams to embed security into new projects and technology adoption
• Govern the managed SOC service, improving detection coverage, playbooks, escalation paths and response quality
• Coordinate IT-side incident response and specialist partners
• Validate incident-response readiness through testing
• Drive integrations between the SOC, SIEM, security platforms and ITSM
• Assess IT services and changes, prioritise vulnerabilities and coordinate remediation with IT owners
• Manage security exceptions, including risk assessment, compensating controls, expiry tracking and escalation
• Evolve SIEM/EDR, secure-access and enterprise password-management platforms
• Maintain technical standards for hardening, firewall rules, database access and software approval
• Lead security initiatives and technical supplier evaluations
• Track delivery, service quality and handover
• Maintain shared documentation and report on coverage, remediation, exceptions and progress
• Report directly to the Group IT Information Security & Infrastructure Director; no direct reports

• Bachelor's degree in Computer Science, Information Security, or a related field
• 5 years in IT/Cyber Security, with senior responsibility for technical initiatives or services and a track record of autonomous delivery
• Hands-on SIEM/EDR, managed SOC and incident-response experience
• Strong knowledge of vulnerability assessment, remediation and security exceptions
• Experience securing cloud, identity, endpoints and networks
• Experience applying Zero Trust and developing technical standards
• Ability to assess configurations and challenge designs
• Ability to coordinate IT teams and providers, balancing risk reduction, business continuity, cost and global scalability
• Excellent Italian and English
• Experience with Microsoft Sentinel/Defender, Azure, Entra ID or Zscaler, security automation, or multinational/FMCG environments is nice to have
• CISSP, CCSP or Microsoft security certifications are a plus

• Variable Pay: Yes, PPO
• Meal vouchers worth 12€ for smart working days
• Faschim health insurance plan
• Corporate welfare plan
• Flexible smart working policy