Questa posizione è in Leonardo

Il processo di selezione sarà interamente gestito Leonardo.

--

**Job Description:** Leonardo is one of the strategic industrial partners of the GCAP (Global Combat Air Programme) program, together with the British BAE Systems and the Japanese Mitsubishi Heavy Industries, aimed at the development and realization of a new generation air system, defined as a “system of systems.” Employed for multi-domain operations in the defense sector, the system will feature a “core platform” connected with other peripheral “adjuncts” systems, both piloted and unpiloted. The program, one of the most challenging and futuristic for the aerospace and defense industry, will drive the technological revolution that will characterize the sector over the next fifty years. A challenge aimed at strengthening the technological and industrial sovereignty of the countries involved, because it aims to identify and make available those innovative technologies, called enabling technologies, that will ensure the generational leap, generating positive returns and economic and social progress for the entire country system, benefiting new generations. The resources who will work on this program will have the opportunity to access a professional growth path in an international and technologically advanced context. Within the **Cyber & Security Solutions** Business Area, we are looking for a **Cyber Resilience Advisor** for our **Rome Laurentina** office. This person will be responsible for the following activities: * Execute assessments and gap analyses with the related definition of requirements, both baseline and detailed, for the cyber resilience of systems/products of varying complexity (monolithic products, complex systems, systems of systems, cyber-physical systems), performing assessments and verifying compliance with national and international standards (ISO/IEC 27001:2022, ISA/IEC 62443, ISO 15408 (Common Criteria), National Cyber Security Perimeter, NIST CSF, NIST SP800-160 v2, NIST SP800-53 v5) and best practices,



as well as specific military and civil sector regulations (ED-202A/DO-326A, ED-203A/DO-356A, DO-178C, NGVA (Stanag 4754), etc.); * Define a priority for requirements to be implemented based on the criticality and risk mitigated by the requirement itself; * Perform cyclic monitoring activities on the assessments carried out, aimed at monitoring the level of cyber resilience of the product/system. **Education:** STEM Degree **Seniority:** Expert/Senior: at least 5 years of experience in the sector. **Technical knowledge and skills:** * Knowledge of national and international standards (ISO/IEC 27001:2022, ISA/IEC 62443, ISO 15408 (Common Criteria), National Cyber Security Perimeter, NIST CSF, NIST SP800-160 v2, NIST SP800-53 v5); * Knowledge of specific sector regulations, military and civil (ED-202A/DO-326A, ED-203A/DO-356A, DO-178C, NGVA (Stanag 4754), etc.); * Knowledge of security by design paradigms and general security in software/systems/product development according to various development models (cyclic, waterfall, devops/devsecops, etc.); * Knowledge of the main standards and frameworks for cyber risk analysis (ISO/IEC 27005, Magerit, eBios, etc.). **Behavioral skills:** Ability to work both in a team and independently on complex projects and in international contexts. The resource must have consulting attitudes and background in order to interact with clients in a proactive and proactive manner. **Language skills:** Fluent English, at least B2 level (preferably certified). **Computer skills:** * Advanced use of the Microsoft Office platform; * Ability to develop software and automation scripts for Office Automation tools. **Other:** A mandatory requirement is availability for national and international business trips,



even of medium duration. **Involvement, enhancement of skills**, care for the **well-being** and **safety of people** are the cornerstones of our corporate culture. We strive every day to foster an **inclusive and stimulating work environment**, actively promoting the principles of **inclusion, equity, and diversity**. What we offer? * Our reference collective labor agreement is the CCNL for Private Metalworking Industry and Plant Installation; * Working mode: Hybrid; * Contractual category: Employee; * Contract type: permanent; * Thirteenth-month salary; * Bonuses linked to Business results; * Welfare vouchers worth 250 euros annually; * Company canteen; * Opportunities for continuous training and updating of professional skills and soft skills; * Well-being: we prioritize the economic, physical, social, and psychological well-being of our people, offering multiple solutions tailored to their needs. **The company reserves the right to make evaluations regarding the level of classification and the economic proposal, based on objective criteria that emerged during the selection process and in coherence with the seniority of the identified candidate and the position, in compliance with the principles of fairness, transparency, and equal opportunities provided for by current legislation.** **We look forward to your application**: send us your CV within **three weeks** from the opening of the job announcement. **How does the selection process work?** After collecting applications, CVs most aligned with the required qualifications are evaluated and identified. Selected candidates undergo an introductory interview with the Human Resources team, focusing on motivation and aptitude, followed by a technical in-depth interview with the Business. At the end of the process, the person receives feedback, whether the outcome is positive or negative. **Seniority:** Esperto **Primary Location:** IT - Roma - Via Laurentina **Contract Type:** Permanent **Total Base Pay Range:** 36K - 59K **Hybrid Working:** Ibrido

--

📌 CYS_GCAP_Cyber Resilience Advisor _GCSC (Roma)
🏢 Leonardo
📍 Roma