Overview

In this role you will embed Security by Design across digital solutions, ensuring ongoing compliance throughout the system lifecycle. You will guide Product Owners and Delivery Managers to integrate security from concept to operation, and lead audits to drive improvements. You’ll establish governance and alignment with regulatory requirements, risk management, and enterprise guardrails. Joining GCAP HQ, you’ll shape secure architectures and enable trusted, resilient systems in a cross-functional setting.

Retribuzione / Benefits

- Hybrid working model
- 13th-month salary
- Performance premio tied to results
- Annual welfare benefits
- Ongoing training and professional development
- Well-being initiatives

Responsabilità

- Define, implement and continuously improve Security by Design across digital solutions and architectures
- Provide security architecture expertise and integrate security controls throughout the system lifecycle
- Translate enterprise security policies into actionable design standards, compliance frameworks and governance models
- Advise engineering and delivery teams on secure design practices
- Support development and deployment of processes and work instructions to embed Security by Design
- Ensure security requirements are delivered on time and within scope while aligning with risk posture
- Conduct security audits and assessments to verify adherence and identify improvements
- Coordinate security by design activities across teams and suppliers with clear ownership
- Monitor compliance,



risks, and remediation efforts; support incident resolution and root cause analysis
- Balance short-term delivery with long-term security strategy and architectural integrity
- Engage with key vendors and support technology evaluations and proofs of concept
- Drive innovation in security architecture and promote adoption of emerging technologies

Requisiti fondamentali

- 5+ years in defence, aerospace or similarly regulated environments
- Professional cybersecurity or security architecture certification (e.g., CISSP, CISM, SABSA)
- Knowledge of NIST cybersecurity frameworks (NIST SP 800 series)
- Degree in engineering, computer science, cybersecurity, or related technical discipline
- Strong knowledge of Security by Design and secure architecture frameworks
- Experience supporting IATO and ATO processes
- Service management knowledge (ITIL) and project management experience (APM/Prince2)
- Experience delivering secure solutions in complex, integrated environments
- Strong understanding of data governance, engineering processes, and digital systems
- Experience with cross-functional teams and stakeholder management
- Security clearance or eligibility for defence programs

- Excellent communication and stakeholder engagement
- Influencing and consultancy to Product Owners and Delivery Managers
- Ability to capture and consolidate security requirements
- Security by Design principles
- Security architecture
- Risk management and compliance

📌 CYS - EDGEWING - Architect Manager – Security by Design (Pavia)
🏢 Leonardo
📍 Pavia