Security by Design Architect Lead

Leonardo; Roma; On-site; EUR 120,000 - 168,000; Full time

Job summary

Leonardo is seeking a Lead Architect - Security by Design for GCAP HQ in Reading, UK. You will embed Security by Design principles across the full lifecycle of digital solutions, guiding product owners and delivery managers to ensure compliant architectures from concept through operation.

You will conduct security audits, develop governance models, and mentor teams to adopt secure design patterns, enabling resilient systems while balancing delivery needs and regulatory requirements.

Responsibilities

• Security by Design Adoption & Lifecycle Management
• Accountable for the definition, implementation, and continuous improvement of Security by Design principles across all digital solutions and architectures
• Provide specialized expertise in security architecture, supporting the integration of security controls and patterns throughout the system lifecycle
• Translate enterprise security policies and risk requirements into actionable design standards, compliance frameworks, and governance models
• Advise on best practices for secure design and development across engineering and delivery teams
• Support the development and deployment of processes, methodologies, and work instructions required to embed Security by Design, including integration points with other systems and enterprise capabilities
• Ensure security requirements are implemented on time, within scope, and aligned with agreed risk posture and compliance objectives
• Conduct security audits and assessments to verify adherence to standards and identify areas for improvement

Job description

Leonardo is seeking a Lead Architect - Security by Design for GCAP HQ in Reading, UK. You will embed Security by Design principles across the full lifecycle of digital solutions, guiding product owners and delivery managers to ensure compliant architectures from concept through operation.

You will conduct security audits, develop governance models, and mentor teams to adopt secure design patterns, enabling resilient systems while balancing delivery needs and regulatory requirements.