CYS_GCAP_Cyber Resilience Advisor _GCSC

Questa posizione è in Leonardo
Riassunto dell'opportunità da parte della Joinrs AI: Leonardo cerca un Cyber Resilience Advisor con laurea STEM e almeno 5 anni di esperienza. Il ruolo prevede valutazioni di cyber resilienza, conformità a standard internazionali e monitoraggio continuo in un contesto internazionale. Offre contratto permanente, lavoro ibrido, RAL fino a 59K, tredicesima, bonus, welfare e formazione continua.
Il processo di selezione sarà interamente gestito da Leonardo.
Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme) program, along with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and implementation of a new generation aerial system, defined as a “system of systems”. Used for multi-domain operations in the defense sector, the system will feature a “core platform” connected with other peripheral “adjuncts”, both piloted and unpiloted.
The program, one of the most challenging and futuristic for the aerospace and defense industry, will drive the technological revolution that will characterize the sector over the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative, enabling technologies that will ensure the generational leap, generating positive returns and economic and social progress for the entire country system, benefiting new generations.
The resources who will work within this program will have the opportunity to access a path of professional growth in an international and technologically advanced context.
Within the Cyber & Security Solutions Business Area, we are looking for a Cyber Resilience Advisor for our Rome Laurentina office.
The person will be responsible for the following activities:
- Perform assessments and gap analyses with the related definition of requirements, both baseline and detailed, for the cyber resilience of systems/products of varying complexity (monolithic products, complex systems, systems of systems, cyber-physical systems), conducting assessments and verifying compliance with national and international standards (ISO/IEC 27001:2022, ISA/IEC 62443, ISO 15408 (Common Criteria), National Cyber Security Perimeter, NIST CSF, NIST SP800-160 v2, NIST SP800-53 v5) and best practices, as well as specific military and civil sector regulations (ED-202A/DO-326A, ED-203A/DO-356A, DO-178C, NGVA (Stanag 4754), etc.);
- Define a priority for the requirements to be implemented based on the criticality and risk mitigated by the requirement itself;
- Carry out cyclical monitoring activities on the assessments performed, aimed at monitoring the level of cyber resilience of the product/system.
Educational Qualification:
- STEM Degree
Seniority:
- Expert/Senior: at least 5 years of experience in the sector.
Technical Knowledge and Skills:
- Knowledge of national and international standards (ISO/IEC 27001:2022, ISA/IEC 62443, ISO 15408 (Common Criteria), National Cyber Security Perimeter, NIST CSF, NIST SP800-160 v2, NIST SP800-53 v5);
- Knowledge of specific sector regulations, military and civil (ED-202A/DO-326A, ED-203A/DO-356A, DO-178C, NGVA (Stanag 4754), etc.);
- Knowledge of security by design paradigms and general security in software/systems/products development according to various development models (cyclical, waterfall, devops/devsecops, etc.);
- Knowledge of the main standards and frameworks for cyber risk analysis (ISO/IEC 27005, Magerit, eBios, etc.).
Behavioral Competencies:
- Ability to work both in a team and independently on complex projects and in international contexts.
- The resource must have consulting aptitudes and background in order to be able to interact with clients in a proactive and propositional manner.
Language Skills:
- Fluent English, at least B2 level (preferably certified).
IT Skills:
- Advanced use of the Microsoft Office platform;
- Ability to develop software and automation scripts for Office Automation tools.
Other:
- A mandatory requirement is availability for national and international travel, even of medium duration.
Involvement, enhancement of skills, attention to the well-being and safety of people are the cornerstones of our corporate culture.
We are committed every day to fostering an inclusive and stimulating work environment, actively promoting the principles of inclusion, equity, and valuing diversity.
What we offer?
- Our reference collective labor agreement is the CCNL for Private Metalworking Industry and Plant Installation;
- Working mode: Hybrid;
- Contractual category: Employee;
- Contract type: permanent;
- Thirteenth month salary;
- Bonuses linked to business results;
- Welfare vouchers worth 250 euros annually;
- Company canteen;
- Opportunities for continuous training and upd