HEAD OF IT AND CYBER SECURITY | IT MANAGER | CISO

Techyon is the first Head Hunter specialising exclusively in search and selection of senior professionals and managers in the Information Technology. Our Recruitment Engineers select the best IT profiles for prestigious IT consulting firms, banks, service companies, manufacturing groups, start-ups of excellence and digital DNA companies.

About the Company: for an important Company, our Recruitment Engineers are looking for a HEAD OF IT & CYBER SECURITY.

Core Responsibilities:

• Develops and implements an IT strategy clearly aligned with the company strategy; guides the identification of business needs in terms of IT infrastructure and systems, ensuring, through analysis and understanding of internal customer needs and assessment of feasibility in terms of time, cost, and benefits.
• Information security: Ensures effective and efficient management of company information in accordance with the company's requirements and national government regulations and internal functions, business commitments, and applicable laws and regulations, including security restrictions.
• IT infrastructure and application management: Ensures the development and management of IT services, facilities, telecommunications, applications, systems, and infrastructure through processes of innovation, improvement, maintenance, monitoring, and control, according to an IT program and budget in support of the approved business plan.
• IT systems managing: Responsible for the daily operation and maintenance of current IT systems to support the implementation of business plan; Design and implementation of "new" IT systems in alignment with the company's vision.
• Commercial Bids Support: Ensures the definition of standard terms and conditions related to corporate programs, in line with legal and corporate risk constraints, current regulations (national and international), and corporate policies.
• Supports the issuance of commercial offers in accordance with customer requirements (RFQ) and current regulations and corporate policies in support of internal stakeholders. Supports the proper administration of corporate contracts; coordinating with internal stakeholders and ensuring compliance with corporate policies and obligations.
• Supervision consulting service: Oversees the consulting, training, and support service for corporate users, aiming to achieve full internal customer satisfaction and promote IT culture.
• Design and Implementation of Cyber Security Policies: Develops and implements cybersecurity policies that align with European regulations and Defense & Aerospace industry standards. Ensures that security practices are integrated at all levels of the IT infrastructure. Works with internal IT, development, and operations teams to implement security measures. Collaborates with external clients and vendors to assess the security of solutions and technologies employed. Reviews engineering designs and identifies areas where the product needs to be modified to ensure the required level of cybersecurity.
• Vulnerability management: Defines plans for vulnerability assessments and penetration tests to identify weaknesses in computer systems and devices. Coordinates the mitigation of identified vulnerabilities. Ensures that product vulnerabilities have been addressed as instructed.
• Certification: Strives to obtain and maintain relevant certifications in the industry to enable business continuity. Updates organizational needs for necessary product certifications as requested by the industry.
• Training & Awareness: Develops cybersecurity training programs to educate company employees on best practices and cyber threats. Promotes a culture of corporate IT security.

Must Have:

• Bachelor's degree in Computer Engineering, Telecommunications Engineering, or related fields.
• At least 6 years of previous experience in a similar role
• Knowledge of major cybersecurity frameworks (ISO, NIST, etc.)
• Knowledge of network protocols and security architectures
• Network administration
• Coaching
• Assertive Leadership
• Communication and influencing
• Management by objectives
• Business Acumen
• Negotiation

Nice to have:

• A plus would be having attended second-level master's programs or advanced training courses in information security, cryptography, secure networks, and cybersecurity threat management
• 10 years of previous experience in the Defence & Aerospace sector

Location: Pomezia (Roma). Hybrid working.