Security Governance & Framework
-
Definition and implementation of the Group's global physical security strategy, ensuring alignment with the Enterprise Risk Management framework and NIS2 Directive requirements.
-
Development of physical security policies, standards, and procedures for production sites, offices, and critical infrastructures.
European Organization and Coordination
-
Definition and implementation of a functional organizational structure to enable the coordination of physical security activities across all sites and legal entities of the Menarini Group in Italy and Europe.
-
Identification of local points of contact, definition of roles and escalation flows, and standardization of processes and minimum protection levels.
-
Promotion of an integrated operating model between Corporate and local countries.
Risk Assessment & Critical Assets Protection
-
Coordination of site-level risk assessment activities (threat, vulnerability, and impact analysis).
-
Identification and classification of critical assets and definition of protection measures (access control, video surveillance, perimeter security, anti-intrusion systems).
Business Continuity & Crisis Management
-
Support in defining and updating Business Continuity and Emergency Response plans within the scope of physical security.
-
Participation in the management of major incidents and coordination of escalations.
NIS2 Readiness & Compliance
-
Coordination of alignment initiatives for the NIS2 Directive regarding physical security and operational resilience.
-
Liaising with ICT Security, Legal, and Compliance departments to ensure consistency between physical security, cybersecurity, and risk governance.
Security Culture & Awareness
-
Promoting a security culture within local organizations and providing training for site representatives.
-
Definition of KPIs and reporting systems.
