Cybersecurity Manager (Bilingual - Mandarin)

AOI; Sugar Land (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation package

Immigration sponsorships

Flexible health plans

Job summary

AOI in Sugar Land, Texas seeks a Cybersecurity Manager to lead Governance, Risk & Compliance in a high-tech manufacturing and semiconductor environment. You will align information security policies to ISO/IEC 27001, NIST SP 800-53, and SEMI standards, and collaborate with IT, OT, and engineering teams to protect IP and maintain uptime.

The role demands strong risk management, audits, and vendor security oversight, with direct involvement in regulatory compliance, incident response, and secure

Qualifications

• Bachelor's degree in computer science, Information Security, MIS, Engineering, or a related field.

Responsibilities

• Governance, risk & compliance responsibilities across the organization.
• Define, execute, and mature information security policies mapped to ISO/IEC 27001, NIST SP 800-53, and semiconductor specs (SEMI).
• Lead risk assessments and manage internal/external audits with risk registers and mitigation plans.
• Establish vendor assessment criteria to evaluate and audit external suppliers, equipment manufacturers, and service providers.
• Coordinate enterprise compliance with GDPR, export controls, and data nondisclosure mandates.
• Design, maintain, and run tabletop simulations for the Cyber Incident Response Plan with cross-functional communication paths.
• Interface with OT/ICS teams to extend GRC to fabrication equipment and networks without disrupting production.
• Review IAM, network zoning/micro-segmentation, and zero-trust remote access designs for internal baselines.
• Translate vulnerability findings into prioritized remediation plans for production-critical systems.

Skills

Cybersecurity

Risk management

Leadership

Education

Bachelor's degree

Tools

IAM platforms

Endpoint protection

SIEM

Asset inventorying tools

Job description

The Cybersecurity Manager (High-Tech Manufacturing & Semiconductors) leads the strategic alignment, implementation, and management of the organization's information and operational security frameworks. This role bridges the gap between complex enterprise risk strategies and practical technical engineering controls. Operating in a high-value manufacturing environment, this manager is primarily responsible for Governance, Risk, and Compliance (GRC), while possessing the technical fluency required to collaborate effectively with IT, Operational Technology (OT), and engineering teams. The core mission is to protect proprietary intellectual property (IP), secure advanced fabrication supply chains, ensure operational uptime, and maintain audit readiness against global regulatory standards.

Responsibilities

• Core Governance, Risk & Compliance (GRC) Responsibilities
• Framework Alignment: Define, execute, and mature information security policies mapped explicitly to ISO/IEC 27001, NIST SP 800-53, and semiconductor industry specifications (e.g., SEMI cybersecurity standards).
• Risk Management & Audits: Lead formal risk assessments across corporate networks. Manage internal and external audits, compiling risk registers and mapping mitigation paths.
• Third-Party Supply Chain Security: Establish comprehensive vendor assessment criteria to evaluate and continually audit external component suppliers, equipment manufacturers, and outsourced service providers.
• Regulatory Compliance: Coordinate and ensure enterprise compliance with international regulations relevant to manufacturing data flows, including GDPR, export control constraints, and client-specific data non-disclosure mandates.
• Incident Response Governance: Design, maintain, and run periodic simulation tabletops for the Cyber Incident Response Plan, ensuring clear communication pathways between executive stakeholders, legal counsel, and technical investigators.
• Technical Oversight & Collaboration
• OT/ICS Collaboration: Interface directly with operational technology and SCADA engineering teams to ensure GRC baselines extend to automated fabrication equipment, testing cleanrooms, and physical plant networks without disrupting production availability.
• Architectural Alignment: Review technical designs for Identity & Access Management (IAM), network zoning/micro-segmentation, and zero-trust remote access architecture to ensure strict compliance with internal security baselines.
• Vulnerability Lifecycle Management: Collaborate with security operations and IT engineering to translate vulnerability scan results and penetration testing findings into prioritized, risk-based remediation plans for production-critical servers and workstations.

Qualifications

Education

• Bachelor's degree in computer science, Information Security, Management Information Systems (MIS), Engineering, or a related field (or equivalent practical experience).

Experience

• 5+ years of progressive experience in cybersecurity or IT risk management, with a minimum of 2 years in a dedicated leadership or management function within a manufacturing, aerospace, automotive, or semiconductor environment.

Language

• Mandarin speaking is a must.

Preferred

• Technical Knowledge Base: Deep familiarity with network security constructs, IAM platforms, endpoint protection suites, SIEM logging architectures, and automated asset inventorying tools.

Licenses/certifications

• Industry Certifications: Professional management credentials are highly preferred (e.g., CISM, CISSP, CRISC, or CISA).

Location

This position will be on-site based in Sugar Land, Texas.

Why AOI?

In addition to competitive salary, AOI offers

• Flexible and competitive health (medical, dental, vision) plans offer the employee with the right options to meet individual and family needs
• Employer matching on 401(k) deferrals
• Generous PTO policy, with unused PTO payout at end of the year
• Relocation package available within US
• Immigration sponsorships (Must be currently authorized to work in the US)