CYS - EDGEWING - Architect Manager - Security by Design
pLeonardo is a global industrial group, among the main global players in Aerospace, Defence and Security that realises multi-domain technological capabilities in Helicopters, Aircraft, Aerostructures, Electronics, Cyber Security and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, the UK, Poland and the US. It also operates in 150 countries through subsidiaries, joint ventures and investments. A key player in major international strategic programmes, it is a technological and industrial partner of governments, defence administrations, institutions and companies. /ppWithin the GCAP Joint Venture, in the GCAP Technical Leadership UO, we are looking for a Lead Architect - Security by Design for GCAP HQ in Reading (UK). /ppThe Lead Architect - Security by Design is responsible for embedding security principles throughout the design and delivery of digital solutions, ensuring full adoption and compliance with Security by Design standards. The role is accountable for maintaining compliance across all phases of the system lifecycle and for establishing governance that enforces security requirements from concept through to operation. /ppAs the focal point for Security by Design, the Lead Architect provides expert guidance and consultancy to Product Owners and Delivery Managers, ensuring that security considerations are integrated since the very beginning into architectures, designs, and implementation plans of all the projects within the DED Value Stream. The role also conducts audits to verify adherence to Security by Design standards and identify areas for improvement, supporting programmes in achieving Interim Authority to Operate (IATO) and Authority to Operate (ATO) by mentoring and supporting secure designs aligned with enterprise guardrails, regulatory requirements, risk management frameworks and relevant procedures.
/ppThrough collaboration with stakeholders, the Lead Architect ensures that security controls, patterns, and practices are consistently applied, enabling resilient and trustworthy systems. The role drives continuous improvement in security architecture, promotes standardisation, and ensures that all solutions meet compliance obligations while supporting business objectives. /ph3Key Capability Accountabilities and Objectives /h3h3Objectives /h3ulliSecurity by Design Adoption Lifecycle Management /liliAccountable for the definition, implementation, and continuous improvement of Security by Design principles across all digital solutions and architectures /liliProvide specialized expertise in security architecture, supporting the integration of security controls and patterns throughout the system lifecycle /liliTranslate enterprise security policies and risk requirements into actionable design standards, compliance frameworks, and governance models /liliAdvise on best practices for secure design and development across engineering and delivery teams /liliSupport the development and deployment of processes, methodologies, and work instructions required to embed Security by Design, including integration points with other systems and enterprise capabilities /liliEnsure security requirements are implemented on time, within scope,
and aligned with agreed risk posture and compliance objectives /liliConduct security audits and assessments to verify adherence to standards and identify areas for improvement /li /ulh3Stakeholder Engagement Consultancy /h3ulliAct as the focal point for Security by Design, providing expert consultancy to Product Owners, Delivery Managers, and engineering teams /liliCapture, challenge, and consolidate security requirements to ensure consistency and avoid duplication /liliCommunicate security vision, compliance obligations, risks, and progress clearly to both technical and non-technical audiences /liliDesign and support business change initiatives to embed security culture, including defining and producing training and awareness materials /liliCollaborate with other architects and delivery leads to ensure alignment of security principles across domains and supply chain /li /ulh3Governance, Standards Compliance /h3ulliEnsure adherence to enterprise security standards and regulatory requirements /liliDefine and enforce security design patterns, data protection measures, and access control models /liliSupport regulatory, quality, and audit requirements related to security compliance and risk management /li /ulh3Delivery Execution Operational Excellence /h3ulliCoordinate security by design activities across internal teams and suppliers, ensuring clear ownership and accountability /liliMonitor compliance performance, risks, and dependencies, and drive remediation where required /liliSupport incident resolution, root cause analysis, and continuous improvement of security architecture /liliBalance short-term delivery pressures with long-term security strategy and architectural integrity /li /ulh3Vendor Technology Management /h3ulliSupport relationships with key technology vendors and solution providers /liliContribute to technology evaluations, proofs of concept, and strategic select /li /ul #J-18808-Ljbffr
/ppThrough collaboration with stakeholders, the Lead Architect ensures that security controls, patterns, and practices are consistently applied, enabling resilient and trustworthy systems. The role drives continuous improvement in security architecture, promotes standardisation, and ensures that all solutions meet compliance obligations while supporting business objectives. /ph3Key Capability Accountabilities and Objectives /h3h3Objectives /h3ulliSecurity by Design Adoption Lifecycle Management /liliAccountable for the definition, implementation, and continuous improvement of Security by Design principles across all digital solutions and architectures /liliProvide specialized expertise in security architecture, supporting the integration of security controls and patterns throughout the system lifecycle /liliTranslate enterprise security policies and risk requirements into actionable design standards, compliance frameworks, and governance models /liliAdvise on best practices for secure design and development across engineering and delivery teams /liliSupport the development and deployment of processes, methodologies, and work instructions required to embed Security by Design, including integration points with other systems and enterprise capabilities /liliEnsure security requirements are implemented on time, within scope,
and aligned with agreed risk posture and compliance objectives /liliConduct security audits and assessments to verify adherence to standards and identify areas for improvement /li /ulh3Stakeholder Engagement Consultancy /h3ulliAct as the focal point for Security by Design, providing expert consultancy to Product Owners, Delivery Managers, and engineering teams /liliCapture, challenge, and consolidate security requirements to ensure consistency and avoid duplication /liliCommunicate security vision, compliance obligations, risks, and progress clearly to both technical and non-technical audiences /liliDesign and support business change initiatives to embed security culture, including defining and producing training and awareness materials /liliCollaborate with other architects and delivery leads to ensure alignment of security principles across domains and supply chain /li /ulh3Governance, Standards Compliance /h3ulliEnsure adherence to enterprise security standards and regulatory requirements /liliDefine and enforce security design patterns, data protection measures, and access control models /liliSupport regulatory, quality, and audit requirements related to security compliance and risk management /li /ulh3Delivery Execution Operational Excellence /h3ulliCoordinate security by design activities across internal teams and suppliers, ensuring clear ownership and accountability /liliMonitor compliance performance, risks, and dependencies, and drive remediation where required /liliSupport incident resolution, root cause analysis, and continuous improvement of security architecture /liliBalance short-term delivery pressures with long-term security strategy and architectural integrity /li /ulh3Vendor Technology Management /h3ulliSupport relationships with key technology vendors and solution providers /liliContribute to technology evaluations, proofs of concept, and strategic select /li /ul #J-18808-Ljbffr