Global Cybersecurity Specialist

Who we are Amplifon is an Italian multinational company and the global leader in hearing care solutions and services, built on retail expertise, customization and consumer care. More than 20,000 professionals every day, in a network of 10,000 points of sale across 25 countries, give back the joy of hearing, feeling and living to thousands of people across the  Amplifon we believe people are the most important component of our success.

Thanks to our best-in-class Hearing Care Professionals and front- and back-office teams, we are able to put the everyday taps, pops and splashes back into the lives of our customers. We believe that it is only through strong investment in talent engagement, continuous professional development, support and recognition that our people can exceed every limit and build a fulfilling career.

Role Overview At Amplifon we are evolving our technological infrastructure and elevating our security posture, integrating cutting-edge innovations into our operational cybersecurity framework. As we prioritize innovative services for delivering hearing healthcare, robust cybersecurity is critical to ensure the security and integrity of these systems. In parallel, we are modernizing our internal asset management processes, leveraging digital tools for comprehensive, end-to-end life-cycle management.

We are looking for a talented Global Cybersecurity Specialist to join our Global IT — Cyber Security team. Reporting to the Global Cyber Security Associate Director, you will work hands-on across penetration testing, infrastructure and application security assessment, vulnerability management and security-platform operations. You will also take an active part in security monitoring and incident response, and contribute to our information security governance program (ISO/IEC 27001, NIS2).This

is a high-impact, cross-country role in a fast-moving environment, where your work directly protects customer data and business-critical services and helps shape our asset management strategy.

Key Responsibilities Offensive Security & Assessments Penetration testing & assessment — plan and perform penetration tests and security assessments on web and mobile applications, internal systems and internet-facing infrastructure, identifying vulnerabilities, misconfigurations and exposure (e.g. unmanaged accounts, weak authentication, unnecessary services, exposed personal data).Remediation ownership — produce clear, risk-based reports and drive remediation with system, application and infrastructure owners through to closure, then re-test to confirm fixes are effective.

Controlled validation — support authorized, red-team-style validation activities (e.g. credential/dump validation, lateral-movement checks) to confirm real-world exploitability.

Vulnerability Management Lifecycle management — run and continuously mature the vulnerability management lifecycle: discovery, triage, prioritization, remediation tracking and verification.

Strategy — collaborate in the development and execution of robust vulnerability management strategies across the global estate.

Security Platforms & Infrastructure Platform operations — operate, configure and tune security consoles and platforms across endpoint, network and identity — for example EDR (e.g. Sentinel One), endpoint and patch management (e.g. Ivanti) and network security / firewalls (e.g. Cisco ASA) — ensuring compliance with company policies and industry best practice.

Access & credential hygiene — strengthen access and credential hygiene on shared and critical systems (account reviews, deprovisioning of stale users, credential rotation, reduction of data exposure).Security Monitoring & Incident Response Detection & response — contribute to security monitoring and to the detection, analysis, containment and recovery phases of security incidents, working alongside the SOC and specialized external partners (e.g. threat-intelligence and incident-response providers).Post-incident

hardening — support lessons-learned and hardening activities to reduce the likelihood and impact of recurrence.

Governance, Risk & ComplianceISMS & regulation — contribute to the Information…