Product Cyber Resilience Manager

The opportunity:

Have an Engineering/Science background and an interest in cyber security? Are you a security architect or security risk advisor, but looking for a challenge beyond the same old Enterprise IT problems? Perhaps you already work in a Product Security role?

For a challenge that will yield the reward of guiding product developments with national and international importance, then read on…

Leonardo has an exciting opportunity to contribute at a senior level to the design and certification of an expanding portfolio of world-class Mission Critical and Flight Safety Involved Airborne Systems. As part of the Engineering Governance organisation, you would be responsible for determining a basis of certification appropriate to the security threat. Ideally, you will have practical experience of ISO27001/27004/27005 or NIST Risk Management Framework (RMF); knowledge of UK/NATO Information Assurance/Accreditation frameworks; and familiarity with the application of cyber resilience controls to embedded systems.

Working across the product lines of the Radar and Advanced Targeting line of business, you will support the relevant Head of Engineering Projects to develop security and engineering management plans, leading to qualification and accreditation for service. You will guide the engineering teams within the IPTs through the product lifecycle, managing the basis of certification and/or accreditation on behalf of the System Design Authority, to achieve acceptance of the integrated product. You will also supply subject matter advice into the product maturity reviews, following the principles of Secure by Design.

A significant intrinsic factor of the role is the requirement for continuous improvement of the cyber resilience of Leonardo products. Leonardo will support you to develop yourself and the process capability of the business. Many Leonardo products exist at the "bleeding edge", applying innovative technologies such as AI/ML, Autonomy, High-assurance multicore processing, Electro-Optics, and Model Based Systems Engineering. You will have the opportunity to contribute to and learn from these innovations.

The Leonardo RATS Line-of-Business (LoB) products cover sensor and defensive applications such as Laser Directed Energy Weapons (LDEW), Infrared Countermeasure (IRCM), Integrated Sensing Radar, Surveillance Radar plus other Non-Kinetic Effects products.

You'll be involved in major UK and Global programmes such as Eurofighter Typhoon and Global Combat Air Program, together with many other Crewed and Un-Crewed Airborne Platforms around the globe.

Skill, Qualifications & Knowledge - What we are looking for?

In broad terms, you should have as many of the following as possible:

1. Practical experience of developing a security or safety risk management system for complex products based on a recognised framework in a highly regulated industry such as aerospace, nuclear, automotive, rail or oil & gas;
2. Practical experience of the System Development Life Cycle, Software Development Life Cycle, V-Models and Agile frameworks;
3. Effective and flexible communication and interpersonal skills;
4. Ability to interact with subject matter experts on a wide range of technical and operational topics;
5. Excellent written and verbal communication skills, with the ability to coach and develop others;
6. Ability to obtain SC security clearance and work within UKEO and US ITAR TAA restrictions;
7. The ability to understand complex engineering processes and the inter-dependency of the process components;
8. A passion for promoting and improving the safety and security of complex systems.

It would be desirable, but not essential, if you also had one or more of:

1. Practical experience of ISO27001/27004/27005 or NIST Risk Management Framework (RMF);
2. Knowledge of UK/NATO Information Assurance/Accreditation frameworks;
3. Familiarity with the application of cyber resilience controls to embedded systems.