Cyber Security Architecture Senior Manager

MSC Cruises; Genf; Vor Ort; CHF 180.000 - 240.000; Vollzeit

Zusammenfassung

MSC Cruises is seeking a Senior Manager to lead the Cyber Security Architecture function across IT and OT. You will shape security design, integration and governance for shore-side and onboard technology, including cloud, applications, enterprise infrastructure and shipboard networks.

You will set technical direction, mentor a team of architects and ensure security posture with ISO 27001, NIST CSF and ISA/IEC 62443 standards, while balancing safety and operational objectives in a maritime

Qualifikationen

• 8+ years of cybersecurity experience, including 5+ years leading or managing teams.
• Strong security architecture background across applications, cloud (Azure), networks and enterprise systems, with practical exposure to OT environments.
• Strong application security architecture expertise, including secure-by-design principles, threat modelling, secure SDLC, API security, identity and access controls, and cloud-native applications.
• Strong knowledge of OT security fundamentals, including network segmentation, zones and conduits, secure remote access and system hardening.
• Experience with Git/GitLab, CI/CD, Infrastructure as Code and policy-as-code.
• Knowledge of relevant frameworks and methods, including OWASP, NIST SSDF, Zero Trust, NIST CSF and ISA/IEC 62443.
• Proven ability to lead teams, influence stakeholders and communicate complex topics to technical and non-technical audiences.
• Fluent English; Italian is a strong plus.
• Demonstrated track record of managing a high volume of concurrent engagements across safety-critical environments.
• Experience managing shipyards, ship classification societies, equipment manufacturers, system integrators or OT security partners.

Aufgaben

• Lead the IT/OT security architecture strategy, standards and reference architectures across cloud, applications, networks and shipboard systems.
• Embed security-by-design across technology projects and lifecycles; provide architecture guidance to multiple teams.
• Drive Enterprise Architecture as Code on GitLab; manage reference architectures, policy-as-code and ADRs via CI/CD.
• Improve cloud, enterprise and IT/OT security through baselines, guardrails, secure configurations and continuous improvement.
• Lead and mentor a team of IT/OT security architects; set KPIs and report security posture to CISO and stakeholders.
• Align IT/OT architecture with frameworks like ISO 27001, NIST CSF, ISA/IEC 62443 and maritime guidance.
• Define and manage the cyber security architecture budget; forecast and optimize costs across IT/OT initiatives.

Kenntnisse

Security architecture

Cloud security

OT security

Team leadership

CI/CD / IaC

Regulatory frameworks

ISO 27001

Ausbildung

CISSP

CSK

CSSLP

CCSP

SC-100

ISA/IEC 62443

GICSP

AZ-500

Tools

GitLab

CI/CD

Infrastructure as Code

Policy-as-code

Jobbeschreibung

Where passion meets opportunity

The best of your adventures is the one you have yet to sail!

Your Purpose

We are looking for a Senior Manager to lead our Cyber Security Architecture function across Information Technology (IT) and Operational Technology (OT). In this role you will shape how security is designed, integrated and governed across MSC Cruises’ shoreside and onboard technology landscape — from cloud, applications and enterprise infrastructure to shipboard networks, computer-based systems and operational environments. You will set the technical direction and partner with IT, Digital, Fleet, Marine and Engine, Newbuild and business stakeholders to protect safety, operational continuity and cyber resilience.

Your Impact

• Lead the IT/OT security architecture strategy, standards and reference architectures across cloud, applications, networks, shipboard systems and operational environments.
• Embed security-by-design across technology projects and IT/OT system lifecycles, providing architecture guidance and assurance to IT, Digital, Fleet, Newbuild and Engineering teams.
• Drive “Enterprise Architecture as Code” on GitLab, managing reference architectures, policy-as-code, ADRs and diagrams through merge requests and CI/CD automation.
• Improve cloud, enterprise and IT/OT security through baselines, guardrails, secure configuration standards and continuous improvement.

Leadership & Governance

• Lead, grow and mentor a team of IT/OT security architects and OT security specialists. Set the technical roadmap, define KPIs and metrics, and report on security posture and progress to the CISO and senior stakeholders.
• Align IT/OT architecture and security activities with relevant frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST SP 800-82, ISA/IEC 62443, IACS UR E26/E27, IMO maritime cyber-risk guidance and applicable data-protection requirements.
• Act as a trusted advisor across IT, Digital, Fleet, Marine and Engine, Newbuild and the business, balancing cyber risk with safety, reliability, availability and operational objectives.
• Ensure the definition and implementation of Cyber Security Architecture budget, including annual planning, forecasting, vendor negotiation and cost optimization across IT/OT security initiatives; provide regular budget reporting and variance analysis to the CISO and Finance.

Your Journey so far

• 8+ years of cybersecurity experience, including 5+ years leading or managing teams.
• Strong security architecture background across applications, cloud (Azure), networks and enterprise systems, with practical exposure to OT environments.
• Strong application security architecture expertise, including secure-by-design principles, threat modelling, secure SDLC, API security, identity and access controls, and cloud-native applications.
• Strong knowledge of OT security fundamentals, including network segmentation, zones and conduits, secure remote access and system hardening.
• Experience with Git/GitLab, CI/CD, Infrastructure as Code and policy-as-code.
• Knowledge of relevant frameworks and methods, including OWASP, NIST SSDF, Zero Trust, NIST CSF and ISA/IEC 62443.
• Proven ability to lead teams, influence stakeholders and communicate complex topics to technical and non-technical audiences.
• Fluent English; Italian is a strong plus.
• Demonstrated track record of managing a high volume of concurrent engagements, with an average of 50 projects per year; ability to prioritize, delegate and govern multiple workstreams simultaneously without compromising quality or timelines.
• Experience in a large maritime, transportation, manufacturing, energy or other safety- and availability-critical environments are particularly relevant.
• Experience managing shipyards, ship classification societies, equipment manufacturers, system integrators, managed security providers or other OT security partners.

Preferred Certifications

• CISSP, CSK, CSSLP, CCSP or equivalent.
• Microsoft Certified: Cybersecurity Architect Expert (SC-100).
• ISA/IEC 62443 Cybersecurity Expert or Specialist, and/or Global Industrial Cyber Security Professional (GICSP).
• CCSP or Azure security certifications (e.g. AZ-500), and OT-focused certifications, are a plus

Your Essentials

• In-depth knowledge of security standards and frameworks. Hands-on experience with security tools and technologies including firewalls. Strong communication skills with the ability to convey complex technical concepts to technical and non-technical stakeholders. Professional certifications are strongly preferred.
• Fluency in English is mandatory and Italian is a strong plus.
• Ability to manage multiple priorities and deliver results in a fast-paced dynamic environment.
• EU passport or the right to work in Switzerland.

Our commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves. Our commitment extends to taking meaningful, measurable actions that have a long-term positive impact on our guests, our employees and our planet.