Position Title:  Sr. Manager InfoSec Operations-Plants

-

As part of the Information Security Operations (InfoSec Ops) team, you will lead cybersecurity risk management for PMI U.S. manufacturing facilities and OT-related business and technology environments. This role is responsible for security governance, risk assessment, stakeholder engagement, Cyber Risk Program (CRP) implementation, and collaboration across business and technology teams to improve cyber resilience.

Role

Lead cybersecurity stakeholder engagement, reporting, and awareness initiatives across manufacturing and operational environments.

Partner with manufacturing leadership to advance Cyber Risk Program initiatives and drive remediation efforts. 

Provide cybersecurity guidance, training, and advisory support to business and plant stakeholders. 

Coordinate security assurance and risk management activities for IT and OT projects. - Support implementation of annual Cyber Risk Program initiatives aligned with business priorities and threat intelligence. 

Conduct security assessments of manufacturing facilities, warehouses, third-party manufacturers, and other industrial environments to identify risks and remediation opportunities.

Monitor IT/OT security posture, including network segmentation, vulnerability management, patching, access controls, disaster recovery, system lifecycle management, and security control effectiveness.

Perform cyber risk assessments and drive risk mitigation activities across technology portfolios.

Support cybersecurity incident response activities by providing OT expertise and coordinating corrective action plans.

Required Experience

7+ years of information security experience, including risk management, governance, auditing, application security, controls management, disaster recovery, or business continuity.

5+ years of leadership experience managing direct, indirect, or vendor-supported teams.

3+ years of OT security experience, including industrial network segmentation, OT monitoring, ICS patch management, and disaster recovery.

Experience securing Industrial Control Systems (ICS), including PLCs, HMIs, DCS, SCADA, and Building Management Systems.

Experience implementing cybersecurity programs within manufacturing, engineering, supply chain, industrialization, or similar operational environments. 

Project management experience, preferably in cybersecurity.

Knowledge of ISA/IEC 62443, NIST 800-82, and related cybersecurity frameworks.

Understanding of IIoT platforms, cloud architectures (IaaS, PaaS, SaaS), and Agile/DevOps environments

Preferred Qualifications

BS/BA in Computer Science, Information Systems, Engineering, or a related field. Certifications such as CISSP, ISSMP, CRISC, CISA, CISM, ISO 27001, GICSP, GRID, or ISA/IEC 62443.

PMP, PRINCE2, or equivalent certification.

Annual Salary Range: $160-200K

Philip Morris International (PMI) is an Equal Opportunity Employer. #PMIUS #LI-AC1