- Employment
- Full-Time
- Seniority
- Mid-Level
- Department
- IT & Technology Systems
- Industry
- Eyewear & Vision Care
- Posted
- Nov 2, 2026
About Kering Eyewear
Kering Eyewear is the specialist eyewear division of Kering, created to bring design excellence, brand stewardship, and commercial agility to some of the world’s most desirable luxury houses. As an employer, the company offers a dynamic, international environment where craftsmanship, innovation, and a deep respect for brand identity converge. Its teams collaborate across design, product development, supply chain, marketing, and sales, supporting iconic maisons with precision and creativity. Kering Eyewear values entrepreneurial spirit, diversity, and responsible business practices, providing employees with the opportunity to shape a fast-growing luxury category within a global group committed to sustainability and long-term excellence.
Kering Eyewear is seeking an IT Security and Compliance Officer to support NIS2 compliance, information security risk management, contract reviews, audits and coordination with Group security functions. The role is based in Limena and offers an indicative initial remuneration of €50,000, an annual variable bonus and benefits under the applicable eyewear-industry collective agreement and company policies.
Role & Responsibilities
- Support the company’s compliance with NIS2, including maintaining the control and gap tracker, collecting evidence, following up on remediation actions with IT teams, and supporting incident notification procedures.
- Review security, privacy and service-level aspects of contracts managed by the IT Infrastructure team in collaboration with Legal.
- Collaborate with Kering Group’s CISO and Security Operations Center, serving as Kering Eyewear’s point of contact for Group security initiatives, policies and alignment activities.
- Conduct risk assessments and vulnerability analyses, track findings through remediation, and report status to management.
- Coordinate vulnerability assessments and penetration tests with internal teams and external providers, from scoping through follow-up.
- Develop and maintain local Security Policies, Procedures and Standards aligned with Group guidelines, including Incident Response, Disaster Recovery and Business Continuity procedures, and contribute to periodic testing.
- Contribute to periodic gap analyses of information systems against regulatory, Group and internal requirements.
- Support internal and external audits by providing evidence and coordinating with IT, Privacy and Compliance functions.
- Monitor emerging threats and regulatory developments and share relevant insights with the team.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent experience.
- Working knowledge of NIS2 and GDPR; familiarity with PCI-DSS and HIPAA is a plus.
- Experience or a strong interest in reviewing IT contracts from a security and privacy perspective, including SLAs, DPAs and security annexes.
- Good understanding of core IT and security technologies, including networks, firewalls, identity and access management, endpoint security and vulnerability management.
- Familiarity with frameworks such as ISO/IEC 27001 or the NIST Cybersecurity Framework.
- Relevant certifications, such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+ or CISM, are a plus.
- Experience working in a group or multinational structure and interfacing with headquarters functions is a plus.
- Structured and precise, with the ability to follow topics through to closure.
- Good communication skills, including the ability to explain security and risk concepts to technical and non-technical audiences.
- Fluent English and Italian.
- Available for occasional domestic and international travel.
Skills
Experience
3–5 years in information security, IT risk or IT compliance.
Education
Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent experience.
Workplace
The role is situated in Limena, Veneto, Italy — conveniently close to Padua.
Benefits
Annual variable bonus; additional benefits and initiatives in accordance with company policies, in addition to those provided under the applicable collective agreement and current legislation.
Culture
Kering Eyewear offers a dynamic, international workplace where entrepreneurial spirit, design excellence, and a deep understanding of luxury come together. As part of the Kering Group, it fosters collaboration, innovation, and responsible growth, empowering teams to shape distinctive eyewear experiences for some of the world’s most prestigious brands.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Kering Eyewear, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Information Security Officer», «IT Risk and Compliance Officer», «Cybersecurity Compliance Officer», «Information Security and Governance Officer», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.