Overview
In this role you will embed Security by Design across digital solutions, ensuring ongoing compliance throughout the system lifecycle. You will guide Product Owners and Delivery Managers to integrate security from concept to operation, and lead audits to drive improvements. You’ll establish governance and alignment with regulatory requirements, risk management, and enterprise guardrails. Joining GCAP HQ, you’ll shape secure architectures and enable trusted, resilient systems in a cross-functional setting.
Retribuzione / Benefits Hybrid working model
13th-month salary
Performance premio tied to results
Annual welfare benefits
Ongoing training and professional development
Well-being initiatives
Responsabilità Define, implement and continuously improve Security by Design across digital solutions and architectures
Provide security architecture expertise and integrate security controls throughout the system lifecycle
Translate enterprise security policies into actionable design standards, compliance frameworks and governance models
Advise engineering and delivery teams on secure design practices
Support development and deployment of processes and work instructions to embed Security by Design
Ensure security requirements are delivered on time and within scope while aligning with risk posture
Conduct security audits and assessments to verify adherence and identify improvements
Coordinate security by design activities across teams and suppliers with clear ownership
Monitor compliance, risks,



and remediation efforts; support incident resolution and root cause analysis
Balance short-term delivery with long-term security strategy and architectural integrity
Engage with key vendors and support technology evaluations and proofs of concept
Drive innovation in security architecture and promote adoption of emerging technologies
Requisiti fondamentali 5+ years in defence, aerospace or similarly regulated environments
Professional cybersecurity or security architecture certification (e.g., CISSP, CISM, SABSA)
Knowledge of NIST cybersecurity frameworks (NIST SP 800 series)
Degree in engineering, computer science, cybersecurity, or related technical discipline
Strong knowledge of Security by Design and secure architecture frameworks
Experience supporting IATO and ATO processes
Service management knowledge (ITIL) and project management experience (APM/Prince2)
Experience delivering secure solutions in complex, integrated environments
Strong understanding of data governance, engineering processes, and digital systems
Experience with cross-functional teams and stakeholder management
Security clearance or eligibility for defence programs
Excellent communication and stakeholder engagement
Influencing and consultancy to Product Owners and Delivery Managers
Ability to capture and consolidate security requirements
Security by Design principles
Security architecture
Risk management and compliance

📌 CYS - EDGEWING - Architect Manager – Security by Design (Monza)
🏢 Leonardo
📍 Monza