Cys - Gcap Joint Venture Headquarters - It Governance, Risk & Compliance Manager

Leonardo; Lazio; In loco; EUR 30.000 - 50.000; Tempo pieno

Descrizione del lavoro

A global industrial group is seeking an experienced IT Governance, Risk & Compliance Manager in Italy. The successful candidate will define and monitor IT governance frameworks, manage risks, and ensure regulatory compliance. With a requirement for 5+ years of experience in IT governance, this senior role demands a proactive mindset and strong leadership abilities. Ideal applicants will possess a Bachelor's degree in a relevant field and a deep understanding of industry frameworks. Fluency in English is essential.

Competenze

• 5+ years of experience in IT Governance, Risk & Compliance.
• Bachelor's degree in engineering, Economics, Law, or related field.
• Strong knowledge of industry frameworks and standards.

Mansioni

• Define and maintain the IT Governance framework.
• Manage the IT risk lifecycle and propose mitigation plans.
• Support compliance activities with regulations.

Conoscenze

IT Governance

Risk Management

Compliance

Leadership

Cross-functional collaboration

Formazione

Bachelor’s degree in engineering, Economics, Law, or related field

Strumenti

ISO/IEC 27001

NIST

COBIT

ITIL

Descrizione del lavoro

Job Description

Leonardo is a global industrial group, among the main global players in Aerospace, Defence and Security that realises multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the UK, Poland and the US. It also operates in 150 countries through subsidiaries, joint ventures and investments. A key player in major international strategic programmes, it is a technological and industrial partner of governments, defence administrations, institutions and companies.

Position

Within the GCAP Joint Venture, in the GCAP Technical Leadership UO, we are looking for an IT Governance, Risk & Compliance Manager for GCAP HQ in Reading (UK).

The IT Governance, Risk & Compliance (GRC) Manager is responsible for defining, implementing and monitoring the IT governance framework, IT risk management and regulatory compliance in the digital and technological fields. The role acts as a point of reference for GRC issues within the Digital Information Department, collaborating across different business functions and ensuring compliance with internal standards, regulatory requirements and industry best practices.

Key Capability Accountabilities & Objectives

• Define and maintain the IT Governance framework, ensuring alignment with strategic objectives.
• Manage the IT risk lifecycle by identifying, assessing and monitoring technological risks and proposing appropriate mitigation plans.
• Coordinate compliance activities with relevant regulations and regulatory requirements.
• Support the development and updating of IT policies, standards and procedures.
• Support internal and external audit processes by providing documentation, evidence and guidance.
• Monitor and ensure compliance with IT security and data protection policies.
• Collaborate across functions (Legal, Audit, Risk Management, etc.) to ensure an integrated approach to risk management.

Seniority

Senior (5-10 years).

Essential Skills and Experience

• 5+ years of experience in IT Governance, Risk & Compliance, preferably within highly regulated or structured environments.
• Bachelor’s degree in engineering, Economics, Law, or a related field (Master’s degree is often preferred).
• Strong knowledge of industry frameworks and standards (e.g., ISO/IEC 27001, NIST, COBIT, ITIL).
• Proactive mindset and ability to work cross-functionally in complex, dynamic environments.
• Organized and detail-oriented approach to auditing and knowledge validation activities.
• Proactive and solution-oriented mindset, strong interpersonal and cross-functional collaboration skill.
• Leadership and team management skills.

Desiderable Skills and Experience

• CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Auditor/Implementer, or equivalent.
• Experience managing third-party risk and vendor governance processes.
• Strong analytical and critical thinking abilities.

Language Skills

English C1.

Citizenship

Italian.