CYS_GCAP_Cyber Resilience Advisor _GCSC

Job Description:

Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme) program, along with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and implementation of a new generation aerial system, defined as a “system of systems”. Used for multi-domain operations in the defense sector, the system will feature a “core platform” connected with other peripheral “adjuncts”, both piloted and unpiloted.

The program, one of the most challenging and futuristic for the aerospace and defense industry, will drive the technological revolution that will characterize the sector over the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative, enabling technologies that will ensure the generational leap, generating positive returns and economic and social progress for the entire country system, benefiting new generations.

The resources who will work within this program will have the opportunity to access a path of professional growth in an international and technologically advanced context.

Within the Cyber & Security Solutions Business Area, we are looking for a Cyber Resilience Advisor for our Rome Laurentina office.

The person will be responsible for the following activities:

• Perform assessments and gap analyses with the related definition of requirements, both baseline and detailed, for the cyber resilience of systems/products of varying complexity (monolithic products, complex systems, systems of systems, cyber-physical systems), conducting assessments and verifying compliance with national and international standards (ISO/IEC 27001:2022, ISA/IEC 62443, ISO 15408 (Common Criteria), National Cyber Security Perimeter, NIST CSF, NIST SP800-160 v2, NIST SP800-53 v5) and best practices, as well as specific military and civil sector regulations (ED-202A/DO-326A, ED-203A/DO-356A, DO-178C, NGVA (Stanag 4754), etc.);

• Define a priority for the requirements to be implemented based on the criticality and risk mitigated by the requirement itself;

• Carry out cyclical monitoring activities on the assessments performed, aimed at monitoring the level of cyber resilience of the product/system.

Educational Qualification:

STEM Degree

Seniority:

Expert/Senior: at least 5 years of experience in the sector.

Technical Knowledge and Skills:

• Knowledge of national and international standards (ISO/IEC 27001:2022, ISA/IEC 62443, ISO 15408 (Common Criteria), National Cyber Security Perimeter, NIST CSF, NIST SP800-160 v2, NIST SP800-53 v5);

• Knowledge of specific sector regulations, military and civil (ED-202A/DO-326A, ED-203A/DO-356A, DO-178C, NGVA (Stanag 4754), etc.);

• Knowledge of security by design paradigms and general security in software/systems/products development according to various development models (cyclical, waterfall, devops/devsecops, etc.);

• Knowledge of the main standards and frameworks for cyber risk analysis (ISO/IEC 27005, Magerit, eBios, etc.).

Behavioral Competencies:

Ability to work both in a team and independently on complex projects and in international contexts. The resource must have consulting aptitudes and background in order to be able to interact with clients in a proactive and propositional manner.

Language Skills:

Fluent English, at least B2 level (preferably certified).

IT Skills:

• Advanced use of the Microsoft Office platform;

• Ability to develop software and automation scripts for Office Automation tools.

Other:

A mandatory requirement is availability for national and international travel, even of medium duration.

Involvement, enhancement of skills, attention to the well-being and safety of people are the cornerstones of our corporate culture.

We are committed every day to fostering an inclusive and stimulating work environment, actively promoting the principles of inclusion, equity, and valuing diversity.

What we offer?

• Our reference collective labor agreement is the CCNL for Private Metalworking Industry and Plant Installation;

• Working mode: Hybrid;

• Contractual category: Employee;

• Contract type: permanent;

• Thirteenth month salary;

• Bonuses linked to business results;

• Welfare vouchers worth 250 euros annually;

• Company canteen;

• Opportunities for continuous training and updating of professional and soft skills;

• Well-being: we prioritize the economic, physical, social, and psychological well-being of our people, offering multiple solutions close to their needs.

The company reserves the right to make evaluations regarding the level of employment and the economic proposal, based on objective criteria emerged during the selection process and in coherence with the seniority of the identified candidate and the position, in compliance with the principles of fairness, transparency and equal opportunities provided by current legislation.

We look forward to your application: send us your CV within three weeks of the job announcement opening.

How does the selection process work?

Following the collection of applications, CVs that are most in line with the required qualifications are evaluated and identified. Selected candidates undergo an introductory interview with the Human Resources team, motivational and aptitude-based, followed by a technical in-depth interview with the Business. At the end of the process, the person receives feedback, whether the outcome is positive or negative.

Seniority:

Expert

Primary Location:

IT - Roma - Via Laurentina

Contract Type:

Permanent

Total Base Pay Range:

36K - 59K

Hybrid Working:

Hybrid