Data Protection and Compliance Manager

Job Description:

Leonardo is an international industrial group, among the world's leading players in Aerospace, Defense, and Security, which creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through subsidiaries, joint ventures, and shareholdings. A protagonist in major global strategic programs, it is a technological and industrial partner for Governments, Defense Administrations, Institutions, and businesses.

Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme), together with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and creation of a new generation air system, defined as a “system of systems”. Used for multi-domain operations in the defense sector, the system will be characterized by a “core platform” connected with other peripheral “adjunct” systems, piloted and unpiloted.

The program, one of the most challenging and futuristic for the aerospace and defense industry, will drive the technological revolution that will characterize the sector over the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative, enabling technologies that will ensure the generational leap, generating positive returns and economic and social progress for the entire country system, benefiting new generations.

Within the Joint Venture established for the implementation of the GCAP Program, we are looking for a Data Protection and Compliance Manager for the GCAP Headquarters located in Reading (UK).

The workplace will be READING (UK) for at least 3 years.

RESPONSIBILITIES:

The role will be part of the JV's Operations function and will report directly to the Legal and Regulatory Compliance Manager.

TASKS:

• Lead and manage the organization's data protection and privacy compliance framework

• Ensure compliance with relevant data protection regulations (e.g., GDPR, UK Data Protection Act or equivalent)

• Act as an expert in data protection, privacy, and information governance

• Develop, implement, and maintain data protection policies, procedures, and standards

• Advise on data protection risks related to projects, systems, and new initiatives

• Oversee Data Protection Impact Assessments (DPIAs) and risk mitigation actions

• Manage and respond to data subject rights requests within statutory deadlines

• Support the management and investigation of data breaches and incidents, including regulatory notifications where necessary

• Provide data protection training and awareness activities throughout the organization

• Collaborate with regulators, auditors, legal teams, and external stakeholders when necessary

• Monitor regulatory changes and ensure continuous compliance

• Produce reports, metrics, and recommendations for senior leadership

REQUIREMENTS:

Educational qualification:

• Degree or equivalent qualification in law, information governance, data protection, risk, compliance, or a related discipline

• Relevant professional certifications (or in progress), such as:

  • CIPP/E, CIPM or CIPT

• BCS Data Protection Practitioner

• IAPP, ISO 27001 or similar

Essential requirements:

• Demonstrable experience in a data protection, privacy, or compliance role

• Solid operational knowledge of data protection legislation and regulatory frameworks

• Experience in developing and implementing data protection policies and controls

• Ability to conduct DPIAs and assess data protection risks

• Experience in managing data breaches, incidents, and regulatory engagement

Preferential qualifications:

• Experience in a Data Protection Officer (DPO) or support role

• Experience working in a regulated, public sector, or complex organizational environment

• Knowledge of cybersecurity, cyber risk, or document management

• Experience in delivering training or awareness programs

• Familiarity with audit, assurance activities, or compliance reporting

Language skills: English C1

Other: (e.g., Willingness to travel, Specific certifications…)

Seniority: Junior

Primary Location: IT - Roma - Via Montello

Contract Type: Permanent

Hybrid Working: Hybrid