Job Description:

Leonardo is an international industrial group, among the main global realities in Aerospace, Defense and Security, which creates multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the United Kingdom, Poland, the United States, and operates in 150 countries also through controlled companies, joint ventures and shareholdings. A protagonist of the main strategic programs at a global level, it is a technological and industrial partner of Governments, Defense Administrations, Institutions and companies.

Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme), together with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and implementation of a new generation aerial system, defined as a “system of systems”. Employed for multi-domain operations in the defense sector, the system will be characterized by a “core platform” connected with other peripheral “adjuncts” systems, piloted and unpiloted.

The program, among the most challenging and futuristic for the aerospace and defense industry, will guide the technological revolution that will characterize the sector over the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative technologies, called enabling technologies, which will ensure the generational leap, generating positive returns and economic and social progress for the entire country system, for the benefit of new generations.

As part of the Joint Venture established for the realization of the GCAP Program, we are looking for a Data Protection and Compliance Manager for the GCAP Headquarters located in Reading (UK).

The workplace will be READING (UK) for at least 3 years.

RESPONSIBILITIES: The role will be part of the JV's Operations function and will report directly to the Legal and Regulatory Compliance Manager.

TASKS:

• Guide and manage the organization's data protection and privacy compliance framework

• Ensure compliance with relevant data protection legislation (e.g. GDPR, UK Data Protection Act or equivalent)

• Act as an expert in data protection, privacy and information governance

• Develop, implement and maintain data protection policies, procedures and standards

• Advise on data protection risks related to projects, systems and new initiatives

• Oversee Data Protection Impact Assessments (DPIA) and risk mitigation actions

• Manage and respond to data subject rights requests within statutory deadlines

• Support the management and investigation of data breaches and incidents, including regulatory notifications where necessary

• Offer data protection training and awareness activities throughout the organization

• Collaborate with regulators, auditors, legal teams and external stakeholders when necessary

• Monitor regulatory changes and ensure continuous compliance

• Produce reports, metrics and recommendations for senior leadership

REQUIREMENTS:

Education:

• Degree or equivalent qualification in law, information governance, data protection, risk, compliance or a related discipline

• Relevant professional certifications (or in progress), such as:

• CIPP/E, CIPM or CIPT

• BCS Data Protection Practitioner

• IAPP, ISO 27001 or similar

Essential requirements:

• Demonstrable experience in a data protection, privacy or compliance role

• Solid operational knowledge of data protection legislation and regulatory frameworks

• Experience in developing and implementing data protection policies and controls

• Ability to conduct DPIAs and assess data protection risks

• Experience in managing data breaches, incidents and regulatory involvement

Preferential titles:

• Experience in the role of Data Protection Officer (DPO) or support

• Experience working in a regulated, public sector or complex organizational environment

• Knowledge of cyber security, cyber risk or document management

• Experience in delivering training or awareness programs

• Familiarity with audit, assurance activities or compliance reporting

Language skills: English C1

What do we offer? Our reference collective labor agreement is the CCNL for Private Metalworking Industry and Plant Installation; Working methods: Hybrid Contractual category: Employee Contract type: permanent Salary Range 35,110.40 - 54,436 € RAL Thirteenth month salary; Bonuses linked to Business results Welfare vouchers worth 250 euros per year; Opportunities for continuous training and updating of professional skills and soft skills; Well-being: we place the economic, physical, social and psychological well-being of our people first, offering multiple solutions close to their needs.

The company reserves the right to make evaluations regarding the classification level and the economic proposal, based on objective criteria emerged during the selection process and in coherence with the seniority of the identified candidate and the position, in compliance with the principles of fairness, transparency and equal opportunities foreseen by current legislation. We await your application: send us your CV within three weeks of the job advertisement opening. How does the selection process work? Following the collection of applications, the CVs most in line with the required requirements are evaluated and identified. Selected candidates undergo an introductory interview with the Human Resources team, motivational and aptitude, followed by an in-depth technical interview with the Business. At the end of the process, feedback is given to the person, both in case of positive and negative outcome

Seniority: Junior

Primary Location: IT - Roma - Via Montello

Contract Type: Permanent

Hybrid Working: Hybrid