CYS_Security Manager_CSC

About Leonardo

Leonardo is a global industrial group, a leader in Aerospace, Defence, and Security. We engineer multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security, and Space. With over 60,000 employees worldwide, we have a strong industrial presence in Italy, the UK, Poland, and the United States, operating in 150 countries through subsidiaries, joint ventures, and partnerships. We are a key partner in major global strategic programs, working with governments, defence administrations, institutions, and businesses.

The Opportunity

Within our Cyber & Security Solutions Business Area, specifically the OT/IoT Security Consultancy Organizational Unit, we are seeking a Security Manager. This role is based in our Rome Laurentina office, with potential for placement in our Milan Nerviano office as well.

Your Role and Responsibilities

As a Security Manager, you will be instrumental in:

• Supporting client Top Management in defining and implementing strategies to achieve OT cyber objectives and regulatory compliance (PSNC, NIS2).
• Analyzing and evaluating infrastructure cyber posture through assessments against international frameworks and standards.
• Re-engineering OT Cyber Security processes by analyzing and drafting Guidelines, Policies, and Procedures.
• Defining the baseline for the correct cybersecurity management of ICS systems.
• Analyzing and defining Cybersecurity Requirements Specifications and the Security High Level Design for ICS/OT plants (Green Field and Brown Field), compliant with IEC 62443.
• Verifying, through appropriate audits, the degree of Compliance with procedures, policies, OT sector standards (ISA62443), and mandatory regulations.
• Defining and implementing Cyber Risk Management models (based on standards like ISO/IEC 27005) for the assessment and management of cyber risks in the OT domain and all areas impacted by current regulations.
• Defining appropriate remediation plans based on action types and the degree of mitigation to cyber threat exposure.
• Supporting clients in the correct analysis and management of cyber risks in the supply chain.
• Assisting clients in monitoring cyber processes and defining actions for continuous improvement.

What We're Looking For

Education & Experience

• Education: A degree, preferably in STEM, or equivalent professional experience.
• Seniority: Expert. A minimum of 3 years of experience in a similar role is required.

Technical Skills

• Knowledge of key IT and OT cybersecurity standards and frameworks (FNCS, ISO/IEC 27001, ISO 27005, ISA 62443, ISA 99, ENISA Technical Guidelines for Security Measures, NIST Cybersecurity Framework).
• Knowledge of relevant sector regulations (NIS and NIS2, PSNC, etc.).
• Familiarity with major IT and OT architectural security solutions.
• Experience in conducting IT and OT Security Assessments to evaluate cyber posture and define improvement actions.
• Knowledge of cyber risk analysis methodologies.
• Experience in defining and drafting cybersecurity policies and procedures.

Language Skills

• English language proficiency at B2 level.

Behavioural Competencies

• Ability and autonomy in managing complex activities.
• Customer-oriented approach.
• Excellent teamwork skills to achieve company objectives.
• Excellent organizational and deadline management skills.

Desirable Qualifications

• Possession of certifications such as: ICS/SCADA Security Essentials, CISSP, CISM, Lead Auditor 27001 and 22301 will be considered a plus.

Our Culture and What We Offer

At Leonardo, we prioritize involvement, skill valorization, and the well-being and safety of our people. We are committed to fostering an inclusive and stimulating work environment, actively promoting principles of inclusion, equity, and diversity. We offer:

• Reference collective labor agreement: CCNL for Private Mechanical and Plant Installation Industry.
• Work Arrangement: Hybrid.
• Contract Category: Employee.
• Contract Type: Permanent.
• 13th-month salary.
• Business results-related bonuses.
• Welfare vouchers worth 250 euros annually.
• Company canteen.
• Opportunities for continuous training and development of professional skills and soft skills.
• Well-being: We place economic, physical, social, and psychological well-being at the forefront, offering diverse solutions to meet individual needs.

The company reserves the right to evaluate the employment level and economic proposal based on objective criteria identified during the selection process, in line with the candidate's seniority and the position, respecting principles of equity, transparency, and equal opportunities.

Selection Process

Following the collection of applications, CVs most aligned with the requirements will be evaluated. Selected candidates will undergo an initial HR interview (motivational and aptitude-based), followed by an in-depth technical interview with the Business. Feedback will be provided to all candidates at the end of the process.

Key Details

• Seniority: Expert
• Primary Location: IT - Rome - Via Laurentina
• Additional Locations: IT - Milan - Nerviano
• Contract Type: Permanent
• Hybrid Working: Hybrid

We look forward to receiving your application within three weeks of the job posting.