CYBERSECURITY EXPERT

Description

KAVE is a global brand specializing in home furniture and interior design, dedicated to inspiring unique and nonconformist individuals—just like us. The furniture and interior decoration industry is the world's third-largest retail sector. The potential is enormous, and we aim high. We are a team of over 1\.100 talented and motivated international professionals, on a mission to completely transform the experience from design to customer—delivering outstanding quality\-to\-price ratios, sustainable designs, and a top\-tier omnichannel shopping journey. To keep pace with our expansion, we need extraordinary people to help us achieve extraordinary goals. We are seeking a Cybersecurity Expert to assume end\-to\-end responsibility for the cybersecurity of a company with over 1\.100 professionals—leading both strategic direction and operational execution of protection initiatives, attack surface reduction, and continuous improvement of security controls across corporate, hybrid, cloud, and digital environments. The selected candidate will serve as the internal cybersecurity reference point and will be tasked with consolidating existing capabilities, defining the governance model, and progressively building and leading the team required to scale the security function within the organization. **Responsibilities:** * Design, implement, operate, and maintain technical and organizational cybersecurity controls. * Identify, prioritize, and manage vulnerabilities across infrastructure, applications, endpoints, cloud services, and exposed surfaces. * Manage, analyze, and coordinate responses to security incidents—including internal forensic analysis or external vendor support—from detection and containment through remediation and post\-incident learning. * Review configurations, access rights, privileges, and exposed surfaces to detect weaknesses, deviations, and risk reduction opportunities. * Lead the implementation, evolution, and effective use of protective solutions such as EDR/XDR, IAM, MFA, SIEM, DLP, vulnerability scanners, or equivalent tools. * Analyze security events, alerts, and logs to detect threats or anomalous behavior. * Define and review hardening, segmentation, access control, privilege, and secure configuration policies for corporate, cloud, and hybrid environments. * Support technical audits, security assessments, and remediation processes—ensuring corrective actions are tracked to closure. * Drive automation, technical improvements, and processes that reduce operational risk, increase security function efficiency, and facilitate area scalability. * Collaborate cross\-functionally with internal teams, business units, and vendors to ensure proper implementation of security measures and remediation of identified risks. * Participate in defining secure architecture and reviewing technology changes impacting security—ensuring technical decisions incorporate protection, compliance, and risk reduction criteria. * Promote security best practices, technical awareness, and a cybersecurity culture across the organization. * Define and evolve the cybersecurity governance model—including policies, standards, controls, monitoring processes, and reporting mechanisms. * Design the cybersecurity function’s evolution plan and participate in the progressive buildout of the team—identifying needs, key capabilities, and growth priorities. **Requirements:** * Proven experience in cybersecurity, technical security, security operations, or equivalent roles. * Practical knowledge of vulnerability management, hardening, access control, privilege management, secure configurations, exposed surfaces, and incident management. * Experience with security tools such as SIEM, EDR/XDR, IAM, MFA, DLP, vulnerability scanners, or similar solutions. * Ability to analyze security logs, events, and alerts; interpret risks; and propose containment, remediation, or improvement actions. * Experience working in hybrid, cloud, on\-premise, SaaS, and complex corporate environments. * Knowledge of networks, operating systems, endpoints, identities, permissions, exposed services, and exposure surfaces. * Ability to work with risk\-based criteria, prioritization, and remediation. * Strong communication skills to collaborate effectively with technical teams and other company departments—driving security best practices and fostering organizational awareness. * Experience with security frameworks and compliance standards such as ISO 27001, NIST, CIS Controls, or similar—along with audits, control definition, and remediation planning—is highly valued. * Ability to define processes, structure priorities, and evolve a cybersecurity function from an initial stage toward a more scalable model. **We Offer:** * Join a rapidly expanding company with a solid, ambitious, and continuously evolving project. * Become part of a dynamic and collaborative environment offering real opportunities for professional development and growth within the organization. * Participate in a project strongly focused on innovation, excellence, and long\-term value creation. * Enjoy modern, sustainable facilities designed to promote well\-being and collaboration. * Access an attractive compensation package—including a flexible benefits plan with options such as health insurance, meal vouchers, transportation cards, and childcare support. * Benefit from daily support services such as catering, fresh fruit every morning, and a cafeteria area. * Use an on\-site gym with 24/7\.