Cybersecurity Manager: GRC for High-Tech Manufacturing

Applied-Optoelectronics-Inc; Sugar Land (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation package within US

Immigration sponsorships

Job summary

Applied Optoelectronics, Inc. seeks a Cybersecurity Manager to lead GRC initiatives in a high-value semiconductor manufacturing setting. You will align risk programs with ISO/IEC 27001, NIST SP 800-53, and SEMI standards while partnering with IT, OT, and engineering to protect IP and uptime.

You will oversee risk assessments, audits, and vendor security programs, ensuring regulatory compliance across global data flows and orchestrating incident response governance with executive stakeholders.

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 5+ years in cybersecurity or IT risk management, with at least 2 years in a leadership role within manufacturing, aerospace, automotive, or semiconductor environments.
• Experience aligning security programs to ISO/IEC 27001, NIST SP 800-53, and SEMI cybersecurity standards.

Responsibilities

• Lead governance, risk, and compliance activities across the organization.
• Perform formal risk assessments and manage internal/external audits with mitigation planning.
• Establish and maintain third-party supply chain security programs and vendor risk criteria.
• Ensure regulatory compliance across global manufacturing data flows (GDPR, export controls, NDAs).
• Design and run incident response tabletop exercises and coordinate with executives, legal, and technical teams.
• Collaborate with OT/ICS to extend GRC baselines to fabrication equipment and plant networks.
• Review IAM, network zoning, micro-segmentation, and zero-trust architectures for compliance.
• Translate vulnerability findings into prioritized remediation plans for production systems.

Skills

GRC leadership

Risk management

Regulatory compliance

Policy development

Incident response governance

IAM

Network security

Zero-trust

Vendor risk management

Education

Bachelor's degree in Computer Science / Information Security / MIS / Engineering

Tools

SIEM

Asset inventorying tools

IAM platforms

Endpoint protection

Regulatory standards experience (ISO/NIST/SEMI)

Job description

Applied Optoelectronics, Inc. seeks a Cybersecurity Manager to lead GRC initiatives in a high-value semiconductor manufacturing setting. You will align risk programs with ISO/IEC 27001, NIST SP 800-53, and SEMI standards while partnering with IT, OT, and engineering to protect IP and uptime.

You will oversee risk assessments, audits, and vendor security programs, ensuring regulatory compliance across global data flows and orchestrating incident response governance with executive stakeholders.