Sr. Manufacturing Security Architect

Basic Function

This role will provide manufacturing and cybersecurity Subject Matter Expertise (SME) with guidance and leadership to cross functional teams developing and implementing secure manufacturing solutions. You will ensure innovative solutions are secure by design and legacy systems are adequately protected. The successful candidate will have a strong understanding of Industrial Control Systems (ICS) including DCSs, PLCs, SCADA, SIS, and smart instrumentation, along with Process Control Networks (PCN) and associated applications (e.g., data historians, alarm management systems, reliability and maintenance systems, etc.).

This role, reporting to the leader of Security Architecture and working closely with other members of Cybersecurity, Digital Technology, and Manufacturing will directly contribute to the global enterprise manufacturing architecture and provide appropriate security solutions.

Travel: Up to 5%
 

Roles & Responsibilities

• Establish effective cybersecurity requirements based on industry frameworks, business needs, asset criticality, and risk profile
• Serve as an Operational Technology (OT) Subject Matter Expert (SME) for manufacturing security solutions
• Create and maintain detailed information security roadmaps, architectures, and programs to significantly improve the overall security posture of the organization
• Develop, implement, and assess manufacturing security policies, standards, and guidelines to help internal customers design and implement secure solutions
• Conduct periodic architectural reviews to assess effectiveness and propose optimal alternatives as required; audit and review effectiveness of existing controls
• Lead technical evaluations, security analysis, and risk assessments
• Work with business teams, vendors, and service providers to define security and business requirements and understand existing and emerging security threats, security frameworks, regulations, and methods of mitigation
• Research and develop defensive cybersecurity data strategies
• Establish effective working relationships with operational stakeholders to help execute our business strategy

Min. Qualifications

• A Bachelor of Science degree in Engineering, Computer Science, or a related technical discipline and 10+ years of progressive experience.
• Experience leading and delivering global solutions related to Industrial Control Systems (ICS), Process Control Networks (PCN), and related applications (e.g., data historians, alarm management systems, Advanced process Control (APC), etc.)
• Knowledge of internationally recognized cybersecurity frameworks, standards, and control system reference models (e.g., ISO, NIST CSF, IEC-62443)
• Knowledge of TCP/IP networking and the OSI 7-layer model including DHCP, DNS, NTP, SMTP, etc.
• Excellent verbal and written communication skills with the ability to articulate both technical and abstract concepts in a clear and concise manner
• Excellent interpersonal skills and ability to create collaborative relationships at all levels in the organization

#LI-MC1
#LI-HYBRID

Preferred Qualifications

• 5+ years in a technical leadership role
• CISSP (Certified Information Systems Security Professional)
• Experience in the Manufacturing, Petrochemical or Oil and Gas Industries
• Proficiency with NextGen security tools at scale for an enterprise environment (e.g., EPP, EDR, anti-malware, MDM, VPN)
• Technical expertise in firewalls (Cisco and Palo Alto preferred), Incident Response and Remediation, Security Information and Event Management (SIEM), Web Proxy Servers, SSL VPN and other Remote Access Solutions, wireless security (RF, 802.11, HART, Bluetooth, etc.), or firmware/embedded platform security
• Experience with multifactor authentication methods, standards, and encryption protocols (e.g., SSL/TLS, AES) · Knowledge of advanced cyber threats, threat intelligence, and adversary methods

Competencies