{"id":3521971,"url":"https://alion.io/job/leonardo-cys-edgewing-architect-manager-security-by-design","title":"CYS - EDGEWING - Architect Manager – Security by Design","company":{"id":54177,"name":"Leonardo","domain":"leonardo.com","url":"https://alion.io/company/leonardo-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":201,"ghost_share":0.005,"stale_share":0.955,"repost_share":0.01,"time_to_fill_p50_days":28,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rome, Italy","Turin, Italy","Catania, Italy","Genoa, Italy","Milan, Italy","Italy"],"countries":["IT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":102000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":10},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"ITIL","optional":false}],"status":"live","first_seen_at":"2026-10-29T00:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-13T13:33:21Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Job Description:\nLeonardo is a global industrial group, among the main global players in Aerospace, Defence and Security that realises multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the UK, Poland and the US. It also operates in 150 countries through subsidiaries, joint ventures and investments. A key player in major international strategic programmes, it is a technological and industrial partner of governments, defence administrations, institutions and companies.\nWithin the GCAP Joint Venture, in the GCAP Technical Leadership UO, we are looking for a Lead Architect - Security by Design for GCAP HQ in Reading (UK).\nThe Lead Architect - Security by Design is responsible for embedding security principles throughout the design and delivery of digital solutions, ensuring full adoption and compliance with Security by Design standards. The role is accountable for maintaining compliance across all phases of the system lifecycle and for establishing governance that enforces security requirements from concept through to operation.\nAs the focal point for Security by Design, the Lead Architect provides expert guidance and consultancy to Product Owners and Delivery Managers, ensuring that security considerations are integrated since the very beginning into achitectures, designs, and implementation plans of all the projects within the DE&D Value Stream. The role also conducts audits to verify adherence to Security by Design standards and identify areas for improvement, supporting programmes in achieving Interim Authority to Operate (IATO) and Authority to Operate (ATO) by mentoring and supporting secure designs aligned with enterprise guardrails, regulatory requirements, risk management frameworks and relevant procedures.\nThrough collaboration with stakeholders, the Lead Architect ensures that security controls, patterns, and practices are consistently applied, enabling resilient and trustworthy systems. The role drives continuous improvement in security architecture, promotes standardisation, and ensures that all solutions meet compliance obligations while supporting business objectives.\nKey Capability Accountabilities and Objectives\nObjectives\nSecurity by Design Adoption & Lifecycle Management\nAccountable for the definition, implementation, and continuous improvement of Security by Design principles across all digital solutions and architectures\nProvide specialized expertise in security architecture, supporting the integration of security controls and patterns throughout the system lifecycle\nTranslate enterprise security policies and risk requirements into actionable design standards, compliance frameworks, and governance models\nAdvise on best practices for secure design and development across engineering and delivery teams\nSupport the development and deployment of processes, methodologies, and work instructions required to embed Security by Design, including integration points with other systems and enterprise capabilities\nEnsure security requirements are implemented on time, within scope, and aligned with agreed risk posture and compliance objectives\nConduct security audits and assessments to verify adherence to standards and identify areas for improvement\nStakeholder Engagement & Consultancy\nAct as the focal point for Security by Design, providing expert consultancy to Product Owners, Delivery Managers, and engineering teams\nCapture, challenge, and consolidate security requirements to ensure consistency and avoid duplication\nCommunicate security vision, compliance obligations, risks, and progress clearly to both technical and non-technical audiences\nDesign and support business change initiatives to embed security culture, including defining and producing training and awareness materials\nCollaborate with other architects and delivery leads to ensure alignment of security principles across domains and supply chain\nGovernance, Standards & Compliance\nEnsure adherence to enterprise security standards and regulatory requirements\nDefine and enforce security design patterns, data protection measures, and access control models\nSupport regulatory, quality, and audit requirements related to security compliance and risk management\nDelivery Execution & Operational Excellence\nCoordinate security by design activities across internal teams and suppliers, ensuring clear ownership and accountability\nMonitor compliance performance, risks, and dependencies, and drive remediation where required\nSupport incident resolution, root cause analysis, and continuous improvement of security architecture\nBalance short-term delivery pressures with long-term security strategy and architectural integrity\nVendor & Technology Management\nSupport relationships with key technology vendors and solution providers\nContribute to technology evaluations, proofs of concept, and strategic selection of tools and platforms\nDrive innovation in security architecture and promote adoption of emerging technologies aligned with enterprise guardrails\nEssential Qualifications:\nPrevious experience in a similar role (at least 5 years) within defence, aerospace, or other highly regulated environments\nProfessional certification in cybersecurity or security architecture (e.g., CISSP, CISM, SABSA, or equivalent)\nKnowledge of NIST cybersecurity frameworks and standards (e.g., NIST SP 800 series)\nDegree in engineering, computer science, cybersecurity, or a related technical discipline\nStrong knowledge of Security by Design principles and secure architecture frameworks\nExperience supporting security compliance processes, including Interim Authority to Operate (IATO) and Authority to Operate (ATO)\nService Management knowledge (e.g., ITIL)\nProject Management experience (e.g., APM, Prince2, or equivalent) or demonstrable experience managing security-related projects\nFirst-hand knowledge of relevant security technologies, standards, and risk management practices\nProven experience delivering secure solutions in complex, integrated environments\nStrong understanding of engineering processes, data governance, and digital systems\nExperience working with cross-functional teams (engineering, IT, manufacturing, quality, cyber security)\nAbility to manage multiple stakeholders and competing priorities while maintaining compliance objectives\nStrong delivery mindset with experience in waterfall, agile, or hybrid delivery models\nExcellent communication, influencing, and stakeholder engagement skills\nSecurity clearance or eligibility for clearance in defence programs is mandatory\nEngagement, recognition of talent, and care for our people’s well-being and safety are the cornerstones of our corporate culture.\nEvery day, we are committed to fostering an inclusive and stimulating work environment, actively promoting the principles of inclusion, equity, and diversity.\nWhat do we offer?\n· The applicable collective labour agreement is the Italian National Collective Labour Agreement (CCNL) for the Private Metalworking Industry and Plant Installation Sector;\n· Hybrid working model;\n· Employment status: Executive-level employee;\n· Permanent contract with Italy as the base location;\n· The role includes a secondment of at least two years to Reading, the headquarters of the Joint Venture (JV);\n· 13th-month salary;\n· Performance bonus linked to business results;\n· Annual welfare benefits worth €250;\n· Ongoing training and professional development opportunities, covering both technical and soft skills;\n· Well-being initiatives: we place great importance on the economic, physical, social, and psychological well-being of our people, offering solutions tailored to their needs.\nThe Company reserves the right to determine the employment grade and compensation package based on objective criteria identified during the selection process, taking into account the selected candidate’s seniority, experience, and the requirements of the role, in compliance with the principles of fairness, transparency, and equal opportunities established by applicable laws and regulations.\nHow does the selection process work?\nFollowing the application review process, the CVs that best match the required qualifications will be shortlisted.\nSelected candidates will first take part in an introductory interview with the Human Resources team to assess motivation and soft skills, followed by a technical interview with the hiring team.\nAt the end of the selection process, all candidates will receive feedback, regardless of the outcome.\nSeniority:\nSeniorPrimary Location:\nIT - Roma - Via LaurentinaAdditional Locations:\nIT - Catania, IT - Chieti Scalo, IT - Genova - Fiumara, IT - Milano - Nerviano, IT - Torino - C.so MarcheContract Type:\nPermanentTotal Base Pay Range:\n60-75kHybrid Working:\nHybrid","description_format":"text","description_chars":8885,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work","Professional development"],"hiring_locations":[{"name":"Italy","iso":"IT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["C4ISR","Information Security","Defense Manufacturing","Aircraft Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-30T12:30:39Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":0.9,"age_days":14,"expected_fill_days":28,"reasons":["conf:3","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/leonardo-cys-edgewing-architect-manager-security-by-design","json_url":"https://alion.io/job/leonardo-cys-edgewing-architect-manager-security-by-design.json","meta":{"generated_at":"2026-11-13T20:01:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":39926,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":54177},"rest":"https://alion.io/mcp/rest/get_company?id=54177"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleonardo-cys-edgewing-architect-manager-security-by-design"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleonardo-cys-edgewing-architect-manager-security-by-design"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleonardo-cys-edgewing-architect-manager-security-by-design"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leonardo-cys-edgewing-architect-manager-security-by-design\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleonardo-cys-edgewing-architect-manager-security-by-design"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3521971}},{"tool":"search_jobs","arguments":{"company":"leonardo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3521971},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}