CYS - EDGEWING - Architect Manager – Security by Design
Leonardo S.p.A.14 hours ago
Turin, ItalyStaff+
Responsibilities
- Define, implement, and continuously improve Security by Design principles across digital solutions and architectures.
- Integrate security controls, patterns, data protection measures, and access control models throughout the system lifecycle.
- Translate enterprise security policies and risk requirements into design standards, compliance frameworks, and governance models.
- Provide security architecture consultancy to Product Owners, Delivery Managers, engineering teams, architects, and delivery leads.
- Conduct security audits and assessments, monitor compliance and risks, and drive remediation and continuous improvement.
- Support IATO and ATO activities through secure design mentoring and alignment with enterprise guardrails and regulatory requirements.
- Coordinate Security by Design activities across internal teams and suppliers, ensuring clear ownership and accountability.
- Support incident resolution, root cause analysis, technology evaluations, proofs of concept, and strategic platform selection.
- Develop training and awareness materials and help embed a security culture across the organization.
Requirements
- At least 5 years of experience in a similar role within defence, aerospace, or another highly regulated environment.
- Professional certification in cybersecurity or security architecture, such as CISSP, CISM, SABSA, or equivalent.
- Degree in engineering, computer science, cybersecurity, or a related technical discipline.
- Knowledge of NIST cybersecurity frameworks and standards, including the NIST SP 800 series.
- Strong knowledge of Security by Design principles and secure architecture frameworks.
- Experience supporting security compliance processes, including Interim Authority to Operate and Authority to Operate.
- Service Management knowledge such as ITIL.
- Project Management experience such as APM, Prince2, or equivalent, or demonstrable experience managing security-related projects.
- First-hand knowledge of relevant security technologies, standards, and risk management practices.
- Experience delivering secure solutions in complex, integrated environments and working with engineering, IT, manufacturing, quality, and cybersecurity teams.
- Understanding of engineering processes, data governance, and digital systems.
- Ability to manage multiple stakeholders and competing priorities while maintaining compliance objectives.
- Experience with waterfall, agile, or hybrid delivery models and strong communication, influencing, and stakeholder engagement skills.
- Security clearance or eligibility for clearance in defence programs is mandatory.
Benefits
- Hybrid working model.
- Permanent contract with Italy as the base location and a secondment of at least two years to Reading, UK.
- 13th-month salary.
- Performance bonus linked to business results.
- Annual welfare benefits worth €250.
- Ongoing technical and soft-skills training and professional development.
- Well-being initiatives supporting economic, physical, social, and psychological well-being.
- Employment under the Italian National Collective Labour Agreement for the Private Metalworking Industry and Plant Installation Sector.