Senior IT Manager Risk & Compliance

Energy Consulting group; Brindisi; Ibrido; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A consulting firm specializing in compliance is seeking a Principal - Regulatory Compliance Advisor. This role focuses on implementing the NIST 800 framework within the Digital Technology organization, ensuring policy compliance, and collaborating with military programs. The ideal candidate will have a relevant degree, significant experience with NIST standards, and excellent communication skills in Italian and English.

Servizi

Remote working opportunities

Performance related bonuses

Private medical cover

Competenze

• Significant experience in NIST 800 adoption within an enterprise business.
• Eligible for security clearance under the Italian National Security Framework.
• Fluent in Italian and proficient in English.

Mansioni

• Drive the DT team to ensure compliance with NIST 800 framework.
• Review and update DT Avio Aero policies.
• Collaborate with the Digital CTR team to improve security.

Conoscenze

NIST 800 standards

Collaboration

Communication skills

Formazione

Bachelor’s or master's degree in Information Systems

Descrizione del lavoro

Overview

The Principal - Regulatory Compliance Advisor will be responsible for ensuring the adoption of the NIST 800 framework within the Digital Technology (DT) organization and maintaining updates to the DT Avio Aero Policy. This role will focus on leading the implementation of NIST 800 standards, including 800-39, 800-30 Rev 1, 800-37, 800-171 Rev 3, 800-171A, 800-172, and 800-172A.

In this role you will coordinate and support all DT Product Owners involved into Military Programs and potential other program where is mandatory apply NIST 800. Working with Product Owner and Business you will prepare all documentations needed to demonstrate full compliance of this framework of the DT Avio Aero Applications involved.

In some case there will be involved not just DT Application but also DT services (i.e. M365 Tenant, Microsoft Intune). Even for these types of DT services it’s important to adopt and match NIST 800.

You will provide all documentation that will be reviewed and approved by CIS (Communication Information System) Leader and Chief Security Officer following internal procedure and process to full compliance NIST 800.

You will manage and update Avio Aero DT Policy in compliance at several National / UE / International Directive that our company must satisfy (i.e. Perimeter of Security National Cybernetic, NIS2, EASA Part-IS, Cybersecurity Maturity Model Certification).

You will be part of the Cybersecurity Technology & Risk Compliance Team (CTR) with a specific focus on Compliance dedicated to Military Programs. Working into Avio Aero CTR team you will have opportunity to extend your skills on cybersecurity and compliance, collaborate with rest of DT Organization and other critical business function like Legal, Compliance, ITC (International Trade Compliance).

Roles and Responsibilities

• Drive the DT team to ensure all applications and services achieve full compliance with the NIST 800 framework.
• Review, update, and maintain current DT Avio Aero policies, or create new ones as needed.
• Work closely with Avio Aero business teams involved in Military Programs to support specific projects and initiatives related to architecture and infrastructure.
• Collaborate with the Digital CTR team to improve security and technology in DT Military areas.
• Establish and maintain policies, guidelines, and procedures related to security and compliance for Military Programs, adhering to national and international regulations.

Qualifications / Requirements

• Bachelor’s or master's degree in Information Systems, Information Technology, Computer Science, Engineering, or a related discipline is preferred.
• Significant experience in NIST 800 adoption within an enterprise business.
• Extensive experience in creating, managing, and updating DT policies.
• Strong understanding of NIST 800 standards and modules.
• Eligible for security clearance under the Italian National Security Framework - NOS (art. 9, comma 4 Legge 3 agosto 2007, n. 124).
• Proven ability to work in international teams with a strong attitude toward collaboration and inclusiveness.
• Good oral and written communication skills.
• Fluent in Italian and proficient in English (written and spoken).
• EU work permit.

Desired Characteristics

• Certifications in NIST 800 and / or ISO 27001.
• Demonstrated business analysis and problem-solving capabilities.
• Ability to interact effectively at all levels of the organization.
• Strong interpersonal skills and a positive attitude.
• Competency in Lean methodologies.

What we offer

• Smart working and work life-balance: Avio Aero, when possible, promotes remote work and encourages a good, healthy and satisfying work-life balance. We value our employees’ wellbeing; hence we offer a variety of improvement programs aimed to preserve anyone’s psychological safety and daily needs.
• Total Rewards: At Avio Aero, we understand the importance of Total Rewards. As a new joiner to Avio Aero we are pleased to offer the following welcome benefit plan :
• Performance related bonuses and local bonus scheme
• Flexible benefits platform
• GE Aerospace share plan
• Life and injury insurance
• Private medical cover
• Employee assistant program
• Employee special awards (service and recognition)
• Local special agreements and discounts
• English and languages training for you and one member of your family
• Technical, Leadership and development trainings

Inclusion & Diversity

Avio Aero is proud to be an Equal Opportunity Employer and we are strongly committed to maintain an inclusive and diverse environment. Every employment decision is taken regardless to national or ethnic origin, religion, sexual orientation, gender identity or expression, age, disability, etc.

We are not all the same. Just be Yourself @AvioAero!

Additional Information

• Relocation Assistance Provided : No