Senior IT Manager Risk & Compliance

-; Rivalta di Torino; Ibrido; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading aerospace company in Italy is seeking a Regulatory Compliance Advisor to implement NIST 800 standards within its Digital Technology organization. Responsibilities include driving compliance across services, updating policies, and coordinating with Military Programs. Ideal candidates will have significant experience in NIST compliance, strong communication skills, and the ability to collaborate internationally.

Servizi

Performance-related bonuses

Flexible benefits platform

Life and injury insurance

Private medical cover

Technical and leadership training

Competenze

• Significant experience in NIST 800 adoption within an enterprise business.
• Extensive experience in creating, managing, and updating policies.
• Eligible for security clearance under the Italian National Security Framework.

Mansioni

• Drive compliance with the NIST 800 framework across applications and services.
• Review, update, and maintain DT Avio Aero policies.
• Collaborate with teams on Military Programs related projects.

Conoscenze

Collaboration

Communication

Problem-solving

Interpersonal skills

Formazione

Bachelor's or master's degree in Information Systems, IT, Computer Science, Engineering, or related discipline

Strumenti

NIST 800 standards

ISO 27001 certifications

Descrizione del lavoro

Job Description Summary

The Principal - Regulatory Compliance Advisor will be responsible for ensuring the adoption of the NIST 800 framework within the Digital Technology (DT) organization and maintaining updates to the DT Avio Aero Policy. This role will focus on leading the implementation of NIST 800 standards, including 800-39, 800-30 Rev 1, 800-37, 800-171 Rev 3, 800-171A, 800-172, and 800-172A.

Job Description

In this role you will coordinate and support all DT Product Owners involved into Military Programs and potential other program where is mandatory apply NIST 800. Working with Product Owner and Business you will prepare all documentations needed to demonstrate full compliance of this framework of the DT Avio Aero Applications involved.

In some case there will be involved not just DT Application but also DT services (i.e. M365 Tenant, Microsoft Intune). Even for these types of DT services it's important to adopt and match NIST 800.

You will provide all documentation that will be reviewed and approved by CIS (Communication Information System) Leader and Chief Security Officer following internal procedure and process to full compliance NIST 800.

You will manage and update Avio Aero DT Policy in compliance at several National/UE/International Directive that our company must satisfy (i.e. Perimeter of Security National Cybernetic, NIS2, EASA Part-IS, Cybersecurity Maturity Model Certification).

You will be part of the Cybersecurity Technology & Risk Compliance Team (CTR) with a specific focus on Compliance dedicated to Military Programs. Working into Avio Aero CTR team you will have opportunity to extend your skills on cybersecurity and compliance, collaborate with rest of DT Organization and other critical business function like Legal, Compliance, ITC (International Trade Compliance).

Roles and Responsibilities:

• Drive the DT team to ensure all applications and services achieve full compliance with the NIST 800 framework.
• Review, update, and maintain current DT Avio Aero policies, or create new ones as needed.
• Work closely with Avio Aero business teams involved in Military Programs to support specific projects and initiatives related to architecture and infrastructure.
• Collaborate with the Digital CTR team to improve security and technology in DT Military areas.
• Establish and maintain policies, guidelines, and procedures related to security and compliance for Military Programs, adhering to national and international regulations.

Qualifications/Requirements

• Bachelor's or master's degree in Information Systems, Information Technology, Computer Science, Engineering, or a related discipline is preferred.
• Significant experience in NIST 800 adoption within an enterprise business.
• Extensive experience in creating, managing, and updating DT policies.
• Strong understanding of NIST 800 standards and modules.
• Eligible for security clearance under the Italian National Security Framework - NOS (art. 9, comma 4 Legge 3 agosto 2007, n. 124).
• Proven ability to work in international teams with a strong attitude toward collaboration and inclusiveness.
• Good oral and written communication skills.
• Fluent in Italian and proficient in English (written and spoken).
• EU work permit.

Desired Characteristics

• Certifications in NIST 800 and/or ISO 27001.
• Demonstrated business analysis and problem-solving capabilities.
• Ability to interact effectively at all levels of the organization.
• Strong interpersonal skills and a positive attitude.
• Competency in Lean methodologies.

What we offer

Smart working and work life-balance

Avio Aero, when possible, promotes remote work and encourages a good, healthy and satisfying work-life balance. We value our employees' wellbeing; hence we offer a variety of improvement programs aimed to preserve anyone's psychological safety and daily needs.

Total Rewards

At Avio Aero, we understand the importance of Total Rewards. As a new joiner to Avio Aero we are pleased to offer the following welcome benefit plan:

• Performance related bonuses and local bonus scheme
• Flexible benefits platform
• GE Aerospace share plan
• Life and injury insurance
• Private medical cover
• Employee assistant program
• Employee special awards (service and recognition)
• Local special agreements and discounts
• English and languages training for you and one member of your family
• Technical, Leadership and development trainings

Inclusion & Diversity

Avio Aero is proud to be an Equal Opportunity Employer and we are strongly committed to maintain an inclusive and diverse environment. Every employment decision is taken regardless to national or ethnic origin, religion, sexual orientation, gender identity or expression, age, disability, etc.

We are not all the same. Just be Yourself @AvioAero!

Additional Job Description

Additional Information

Compensation Grade

SPB2

Relocation Assistance Provided: No