Senior Manager, Operational Technology Security

Sandisk; Seberang Perai; On-site; MYR 250,000 - 320,000; Full time

Job summary

A global technology company is seeking a Senior Manager for Operational Technology Security to lead OT visibility and resilience programs across manufacturing sites. The successful candidate will define security strategies, manage OT monitoring solutions, and ensure compliance with industry standards. With at least 10 years in OT security and strong leadership skills, this role demands technical expertise in cybersecurity tools and protocols. The position offers an inclusive workplace and opportunities for diversity in a global setting.

Benefits

Inclusive work environment

Diversity and opportunity for growth

Qualifications

• 10+ years of experience in OT/ICS security.
• Leadership experience of at least 5 years.
• Deep knowledge of OT protocols and sensor deployment strategies.

Responsibilities

• Define and execute the OT security roadmap.
• Implement tools for deep packet inspection.
• Oversee installation and configuration of OT monitoring platforms.

Skills

OT/ICS security

Manufacturing network engineering

Cross-functional team leadership

Traffic analysis

Risk management

Education

Degree in relevant field

Tools

Nozomi Networks

Claroty

Wireshark

Zeek

DNP3

OPC-UA

Job description

Senior Manager, Operational Technology Security

We’re hiring a Senior Manager of Operational Technology (OT) to lead Sandisk’s OT visibility and resilience program across high‑technology manufacturing sites. You’ll stand up and mature our OT monitoring solution, integrate telemetry into our SIEM, and partner with factory operations to ensure security without disrupting production.

This role owns strategy, delivery, and ongoing operations of OT security—bridging engineering, manufacturing, and the SOC—so that Sandisk maintains continuous production with zero downtime due to internal cybersecurity incidents.

Responsibilities

• Program Leadership: Define and execute the OT security roadmap, aligning with corporate cybersecurity strategy and manufacturing uptime objectives.
• OT Monitoring Deployment: Oversee installation and configuration of OT monitoring platforms such as Nozomi Networks, Claroty, Dragos, Armis, ensuring proper sensor placement for maximum visibility.
• Traffic Analysis & Protocol Coverage: Implement tools for deep packet inspection and protocol analysis (e.g., Wireshark, Zeek, Suricata) to monitor Modbus, Profinet, DNP3, OPC‑UA, and other industrial protocols.
• SIEM Integration: Collaborate with SOC and architecture teams to stream OT telemetry into SIEM/SOAR platforms, develop detection logic, and optimize alerting to reduce false positives.
• Asset & Risk Management: Establish and maintain a comprehensive OT asset inventory, vulnerability management process, and configuration baselines for critical systems.
• Network Segmentation & Access Control: Drive segmentation projects, firewall rule reviews, and identity separation between IT and OT environments; implement secure remote vendor access protocols.
• Incident Response & Resilience: Develop OT‑specific incident response playbooks, conduct tabletop exercises, and ensure disaster recovery plans meet manufacturing continuity requirements.
• Compliance & Standards: Ensure adherence to NIST CSF, IEC 62443, and corporate security policies; prepare for internal and external audits.
• Cross‑Functional Collaboration: Work closely with onsite IT teams and Manufacturing leadership to schedule changes, minimize production impact, and jointly achieve zero‑downtime objectives.
• Metrics & Reporting: Define KPIs (e.g., telemetry coverage, MTTR, segmentation compliance) and deliver executive‑level reporting on OT security posture.

Qualifications

• Experience: Minimum 10 years in OT/ICS security, industrial control systems, or manufacturing network engineering, with at least 5 years in a leadership role.
• High‑Tech Manufacturing Expertise: Proven experience in semiconductor or advanced electronics manufacturing environments, understanding production constraints and uptime requirements.
• Technical Expertise: Deep knowledge of OT protocols (Modbus, Profinet, DNP3, OPC‑UA), PLC/SCADA systems, and sensor deployment strategies.
• Security Tools: Hands‑on experience with OT monitoring platforms (Nozomi, Claroty, Dragos, Armis) and integration with SIEM/SOAR solutions.
• Network Skills: Proficiency in configuring SPAN/RSPAN/ERSPAN, packet capture, and traffic analysis using tools like Wireshark or Zeek.
• Risk & Compliance: Familiarity with NIST CSF, IEC 62443, and MITRE ATT&CK for ICs frameworks; experience conducting risk assessments and implementing compensating controls for legacy systems.

Leadership & Communication: Proven ability to lead cross‑functional teams, manage vendors, and communicate effectively with technical and executive stakeholders.

Preferred: Credential segregation between IT and OT domains; knowledge of OT vulnerability management tools.

Additional Information

Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [e-mail] to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

Notice to Candidates

Sandisk has received reports of scams where a payment is requested on Sandisk’s behalf as a condition for receiving an offer of employment. Please be aware that Sandisk and its subsidiaries will never request payment as a condition for applying for a position or receiving an offer of employment. Should you encounter any such requests, please report it immediately to Sandisk Ethics Helpline or email [e-mail].

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.