Security Architect, Italy

About the Position

Security Architect, Italy

Milan

ION Core Banking – Information Security & Compliance

Full-time (hybrid)

---

About Us

We are a community of visionary innovators, dedicated to providing pioneering software and consultancy services to financial institutions, trading firms, central banks, governments, and corporations around the world. We strive to simplify the way people work by providing workflow and process automation software, as well as real-time data and business intelligence to help people make better decisions. We are 13,000+ employees, operating globally with 80+ offices, and serving over 4,800+ customers worldwide.

For the strengthening of the Chief Information Security Office (CISO) function within Cedacri companies, part of ION Group, we are looking for talented professionals to grow their career as Security Architect. This position is targeted at candidates with at least 5 years of relevant experience in Information Security, Security Architecture, or Cybersecurity Governance. Selected candidates will be placed in a dynamic and innovative environment and will collaborate with cross-functional teams to design, implement, and continuously improve the organization's security architecture and cybersecurity controls.

Learn more at www.iongroup.com.

---

Responsibilities

• Define, review, and evolve the organization's security architecture strategy in alignment with business needs, technology roadmaps, and regulatory expectations.
• Contribute to the design and validate secure architectures for enterprise platforms, cloud services, applications, APIs, networks, and infrastructure environments.
• Define security requirements, architectural standards, patterns, and security-by-design principles to be adopted across projects and initiatives.
• Conduct security architecture reviews and risk assessments to identify control gaps and define appropriate mitigation strategies.
• Design and govern security controls related to Identity & Access Management (IAM), Privileged Access Management (PAM), PKI, encryption, authentication, and network security.
• Contribute to threat modeling activities for critical applications, business services, and enterprise platforms.
• Support the implementation of architectures aimed at reducing attack surface, improving resilience, and strengthening segregation and tenant isolation controls.
• Collaborate with Development, Infrastructure, Cloud, DevSecOps, Security Operations, Risk, and Compliance teams to ensure security requirements are embedded throughout the technology lifecycle.
• Evaluate emerging technologies, cybersecurity threats, and industry trends to continuously improve the organization's security posture.
• Contribute to the development of security standards, reference architectures, and strategic cybersecurity initiatives.

---

Requirements

• Master's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related field (with honors preferred).
• At least 5 years of experience in Security Architecture, Cybersecurity Engineering, Information Security, or related disciplines.
• Strong knowledge of enterprise security architecture principles and industry frameworks.
• Proven experience designing secure architectures across cloud, infrastructure, network, application, and hybrid environments.
• Strong knowledge of IAM, PAM, PKI, encryption technologies, authentication protocols, and Zero Trust principles.
• Familiarity with security architecture concepts related to cloud-native environments, APIs, containers, Kubernetes, DevSecOps practices, and SBOM/SCA processes.
• Experience conducting threat modeling and security risk assessments.
• Knowledge of ISO 27001, NIST, CIS Controls, DORA, NIS2, and operational resilience requirements applicable to regulated environments.
• Strong analytical skills with the ability to translate business and technical requirements into pragmatic security solutions.
• Excellent communication skills and ability to engage effectively with both technical and non-technical stakeholders.
• Certifications such as CISSP, CCSP, SABSA, TOGAF, ISO 27001 Lead Implementer, or equivalent would be considered a strong plus.

---

We Offer

• Permanent employment contract
• Italian National Collective Labour Agreement for the Metalworking Industry (CCNL Metalmeccanico)
• Gross Annual Salary (RAL) ranging from €50,000 to €60,000, depending on experience, skills, and qualifications
• Job grade to be determined upon completion of the selection process, with final assessment between B3 and A1 level
• Opportunity to join a leading international technology group operating in the financial services industry
• Exposure to enterprise-wide cybersecurity initiatives in a dynamic, international, and highly innovative environment

---

Location

Milano.

---

Important Notes

According to the Italian Law (L.68/99), candidates belonging to the protected categories list will be given priority.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.