Senior IT Manager Risk & Compliance

Energy Consulting group; Rivalta di Torino; In loco; EUR 60.000 - 80.000; Tempo pieno

Descrizione del lavoro

A prominent consulting firm in Piemonte is seeking a Principal - Regulatory Compliance Advisor to ensure adherence to NIST 800 standards. The role involves collaborating with teams on Military Programs, updating policies, and managing documentation for compliance. Candidates should have a strong background in cybersecurity and excellent communication skills in both Italian and English. This role promotes a healthy work-life balance and offers various perks including performance bonuses and medical cover.

Servizi

Performance related bonuses

Flexible benefits platform

Private medical cover

Employee assistant program

Competenze

• Significant experience in NIST 800 adoption within an enterprise business.
• Extensive experience in creating and managing DT policies.
• Eligible for security clearance under the Italian National Security Framework.

Mansioni

• Drive compliance with NIST 800 framework across applications and services.
• Review and update DT Avio Aero policies as needed.
• Collaborate with business teams for Military Programs.

Conoscenze

Fluent in Italian

Proficient in English

Strong interpersonal skills

Collaboration

Business analysis

Formazione

Bachelor’s or master’s degree in Information Systems, IT, Computer Science, or Engineering

Strumenti

NIST 800 standards

ISO 27001 certifications

Descrizione del lavoro

Job Description Summary

The Principal - Regulatory Compliance Advisor will be responsible for ensuring the adoption of the NIST 800 framework within the Digital Technology (DT) organization and maintaining updates to the DT Avio Aero Policy. This role will focus on leading the implementation of NIST 800 standards, including 800-39, 800-30 Rev 1, 800-37, 800-171 Rev 3, 800-171A, 800-172, and 800-172A.

Job Description

In this role you will coordinate and support all DT Product Owners involved in Military Programs and potential other programs where it is mandatory to apply NIST 800. Working with Product Owners and Business you will prepare all documentation needed to demonstrate full compliance with this framework for the DT Avio Aero Applications involved.

In some cases there will be involved not just DT Applications but also DT services (i.e. M365 Tenant, Microsoft Intune). Even for these types of DT services it is important to adopt and match NIST 800.

You will provide all documentation that will be reviewed and approved by the CIS (Communication Information System) Leader and Chief Security Officer following internal procedures and processes to achieve full NIST 800 compliance.

You will manage and update the Avio Aero DT Policy in compliance with several National/UE/International Directives that our company must satisfy (i.e. Perimeter of Security National Cybernetic, NIS2, EASA Part-IS, Cybersecurity Maturity Model Certification).

You will be part of the Cybersecurity Technology & Risk Compliance Team (CTR) with a specific focus on Compliance dedicated to Military Programs. Working within the Avio Aero CTR team you will have the opportunity to extend your skills on cybersecurity and compliance, and collaborate with the rest of the DT Organization and other critical business functions like Legal, Compliance, ITC (International Trade Compliance).

Roles and Responsibilities

• Drive the DT team to ensure all applications and services achieve full compliance with the NIST 800 framework.
• Review, update, and maintain current DT Avio Aero policies, or create new ones as needed.
• Work closely with Avio Aero business teams involved in Military Programs to support specific projects and initiatives related to architecture and infrastructure.
• Collaborate with the Digital CTR team to improve security and technology in DT Military areas.
• Establish and maintain policies, guidelines, and procedures related to security and compliance for Military Programs, adhering to national and international regulations.

Qualifications/Requirements

• Bachelor’s or master’s degree in Information Systems, Information Technology, Computer Science, Engineering, or a related discipline is preferred.
• Significant experience in NIST 800 adoption within an enterprise business.
• Extensive experience in creating, managing, and updating DT policies.
• Strong understanding of NIST 800 standards and modules.
• Eligible for security clearance under the Italian National Security Framework - NOS (art. 9, comma 4 Legge 3 agosto 2007, n. 124).
• Proven ability to work in international teams with a strong attitude toward collaboration and inclusiveness.
• Good oral and written communication skills.
• Fluent in Italian and proficient in English (written and spoken).
• EU work permit.

Desired Characteristics

• Certifications in NIST 800 and/or ISO 27001.
• Demonstrated business analysis and problem-solving capabilities.
• Ability to interact effectively at all levels of the organization.
• Strong interpersonal skills and a positive attitude.
• Competency in Lean methodologies.

What we offer

Smart working and work life-balance

Avio Aero, when possible, promotes remote work and encourages a good, healthy and satisfying work-life balance. We value our employees’ wellbeing; hence we offer a variety of improvement programs aimed to preserve anyone’s psychological safety and daily needs.

Total Rewards

At Avio Aero, we understand the importance of Total Rewards. As a new joiner to Avio Aero we are pleased to offer the following welcome benefit plan:

• Performance related bonuses and local bonus scheme
• Flexible benefits platform
• GE Aerospace share plan
• Life and injury insurance
• Private medical cover
• Employee assistant program
• Employee special awards (service and recognition)
• Local special agreements and discounts
• English and languages training for you and one member of your family
• Technical, Leadership and development trainings

Inclusion & Diversity

Avio Aero is proud to be an Equal Opportunity Employer and we are strongly committed to maintaining an inclusive and diverse environment. Every employment decision is taken regardless of national or ethnic origin, religion, sexual orientation, gender identity or expression, age, disability, etc.

We are not all the same. Just be Yourself @AvioAero!

Additional Information

Relocation Assistance Provided: No