CYS - GCAP Joint Venture Headquarters - IT Governance, Risk & Compliance Manager

Leonardo; Roma; In loco; EUR 70.000 - 90.000; Tempo pieno

Descrizione del lavoro

A global industrial leader in aerospace and defense is seeking a Senior IT Governance, Risk & Compliance Manager. The role involves defining IT governance frameworks, managing risk, and ensuring compliance with industry standards. Ideal candidates will have over 5 years of experience in IT governance, a relevant Bachelor’s degree, and a strong understanding of industry frameworks like ISO and NIST. Fluency in English and Italian citizenship are required. Join a dynamic environment focused on cutting-edge technological advancements.

Competenze

• 5+ years of experience in IT Governance, Risk & Compliance, preferably in highly regulated environments.
• Bachelor’s degree in engineering, Economics, Law, or related field.
• Strong knowledge of industry frameworks and standards.

Mansioni

• Define and maintain the IT Governance framework.
• Manage the IT risk lifecycle by identifying and proposing mitigation plans.
• Coordinate compliance activities with relevant regulations.

Conoscenze

IT Governance

Risk Management

Compliance

Collaboration

Leadership

Formazione

Bachelor's degree in engineering, Economics, Law, or a related field

Strumenti

ISO / IEC 27001

NIST

COBIT

ITIL

Descrizione del lavoro

Job Description :

Leonardo is a global industrial group, among the main global players in Aerospace, Defence and Security that realises multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the UK, Poland and the US. It also operates in 150 countries through subsidiaries, joint ventures and investments. A key player in major international strategic programmes, it is a technological and industrial partner of governments, defence administrations, institutions and companies.

Within the GCAP Joint Venture, in the GCAP Technical Leadership UO, we are looking for an IT Governance, Risk & Compliance Manager for GCAP HQ in Reading (UK).

The IT Governance, Risk & Compliance (GRC) Manager is responsible for defining, implementing and monitoring the IT governance framework, IT risk management and regulatory compliance in the digital and technological fields. The role acts as a point of reference for GRC issues within the Digital Information Department, collaborating across different business functions and ensuring compliance with internal standards, regulatory requirements and industry best practices.

Key Capability Accountabilities & Objectives

• Define and maintain the IT Governance framework, ensuring alignment with strategic objectives.
• Manage the IT risk lifecycle by identifying, assessing and monitoring technological risks and proposing appropriate mitigation plans.
• Coordinate compliance activities with relevant regulations and regulatory requirements.
• Support the development and updating of IT policies, standards and procedures.
• Support internal and external audit processes by providing documentation, evidence and guidance.
• Monitor and ensure compliance with IT security and data protection policies.
• Collaborate across functions (Legal, Audit, Risk Management, etc.) to ensure an integrated approach to risk management.

Essential Skills and Experience :

• 5+ years of experience in IT Governance, Risk & Compliance, preferably within highly regulated or structured environments.
• Bachelor’s degree in engineering, Economics, Law, or a related field (Master’s degree is often preferred).
• Strong knowledge of industry frameworks and standards (e.g., ISO / IEC 27001, NIST, COBIT, ITIL).
• Proactive mindset and ability to work cross-functionally in complex, dynamic environments.
• Organized and detail-oriented approach to auditing and knowledge validation activities.
• Proactive and solution-oriented mindset, strong interpersonal and cross-functional collaboration skill
• Leadership and team management skills.

Desiderable Skills and Experience

• CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Auditor / Implementer, or equivalent.
• Experience managing third-party risk and vendor governance processes.
• Strong analytical and critical thinking abilities.

Language Skills : English C1.

Citizenship : Italian.

Seniority : Senior (5-10 anni).