Manager - Manufacturing Security

Viatris; United States; On-site; USD 78,000 - 152,000; Full time

Job summary

Viatris seeks a Manager of Manufacturing Security to deliver and mature cybersecurity across manufacturing sites and OT environments. You will translate requirements into practical site plans, lead the deployment of security controls, and drive adoption with stakeholders to ensure sustainable operation.

The role requires collaborating with Manufacturing, IT, and Global Security, managing projects, and developing roadmaps that align with priorities and investments.

Qualifications

• Bachelor’s degree required; Master’s preferred.
• 5+ years in IT, Cybersecurity, Manufacturing Technology or OT.
• CISSP, CISM, GICSP, ISA/IEC 62443 or equivalent certification preferred.
• Knowledge of cybersecurity principles, risk management, change management and OT security practices.
• Familiarity with Purdue Model levels and control system networks.

Responsibilities

• Develop site relationships with manufacturing sites and understand priorities and environment.
• Translate cybersecurity requirements into site-level implementation plans and timelines.
• Lead implementation and integration of cybersecurity controls across OT environments.
• Manage cybersecurity projects across sites, coordinating technical resources and stakeholders.
• Develop roadmaps for cybersecurity delivery aligned with priorities and investments.
• Identify gaps in OT architectures and remediation dependencies; coordinate actions.

Skills

Cybersecurity

OT security

Risk management

Change management

Stakeholder communication

Project management

Networking security

Education

Bachelor's degree

Master's degree

MIS/IT/Engineering/Cybersecurity certification

Job description

Viatris is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale, currently supplying high-quality medicines to approximately 1 billion patients around the world annually and touching all of life's moments, from birth to the end of life, acute conditions to chronic diseases.

We have been included on number of award lists that demonstrate the impact we are making.

Every day, we rise to the challenge to make a difference and here's how the Manager -Manufacturing Securitywill make an impact:

The primary purpose of the Manager, Manufacturing Security, is to deliver and mature cybersecurity capabilities across an assigned portfolio of Viatris manufacturing sites and operational technology environments. The role partners with manufacturing stakeholders and Global Security to translate established cybersecurity requirements into practical solutions, projects, and implementation plans that reflect site priorities, technology environments, and operational constraints. The role leads the implementation and integration of cybersecurity controls within manufacturing environments and works closely with site stakeholders to drive adoption and sustainable operation. The role supports the transition of mature capabilities to appropriate operational teams while retaining responsibility for selected manufacturing security services where required.

Key responsibilities for this role include:

• Develop strong working relationships with assigned manufacturing sites and maintain an understanding of site priorities, culture, technology environments, operational processes, and planned initiatives.
• Translate established cybersecurity requirements into site-level implementation plans, identifying activities, dependencies, resources, sequencing, and stakeholder engagement required for delivery.
• Lead the implementation and integration of cybersecurity controls across assigned manufacturing and operational technology environments.
• Manage cybersecurity projects and delivery activities across assigned sites, coordinating technical resources, site stakeholders, vendors, Cybersecurity teams, and other delivery partners.
• Develop and maintain site cybersecurity delivery roadmaps aligned with manufacturing priorities, technology lifecycle activities, planned investments, and operational constraints.
• Assess site readiness and identify gaps in OT network architecture, implementation dependencies, and technical constraints.
• Coordinate remediation plans with Manufacturing, Engineering, IT, Global Security, and other stakeholders to address cybersecurity implementation gaps.
• Conduct cybersecurity reviews of manufacturing technology projects and engineering plans to ensure established security requirements are incorporated into implementation.
• Drive maturation and adoption of implemented cybersecurity capabilities through processes, documentation, metrics, support models, and stakeholder expectations.
• Coordinate transition of mature cybersecurity capabilities to appropriate operational teams, including documentation, knowledge transfer, support processes, and escalation paths.
• Operate and continuously improve selected manufacturing cybersecurity capabilities and services where ongoing ownership remains with the Manufacturing Security team.
• Communicate site priorities, implementation challenges, technology changes, and actionable cybersecurity recommendations to manufacturing and Cybersecurity stakeholders.
• Develop cybersecurity countermeasures and risk mitigation strategies appropriate to technology and business requirements.
• Maintain stakeholder communication channels and cross-team relationships required for successful cybersecurity delivery.
• Support configuration and change management practices for security capabilities throughout implementation and transition.
• Perform or support risk and vulnerability assessments to inform delivery priorities and remediation activities.
• Create and maintain technical documentation necessary to support sustainable operation and knowledge transfer.

The minimum qualifications for this role are:

• Minimum of a Bachelor's degree required. Master's degree preferred.
• Specialization in MIS, IT, Engineering, Cybersecurity, or related field, however, a combination of experience and/or education will be taken into consideration.
• 5 years' experience in IT, Cybersecurity, Manufacturing Technology, or Operational Technologyrequired.
• CISSP, CISM, GICSP, ISA/IEC 62443 or equivalent relevant certification preferred.
• Knowledge of cybersecurity principles and practices.
• Knowledge of risk management processes.
• Knowledge of change management processes.
• Knowledge of OT cybersecurity compliance requirements and best practices.
• Knowledge of control system environment risks, threats, and vulnerabilities.
• Knowledge of Purdue Model levels and control system network architectures.
• Knowledge of operational priorities and life cycle management principles and practices.
• Knowledge of OT assets, protocols, and asset management principles.
• Skill in communicating complex concepts to technical and business stakeholders.
• Skill in collaborating with others across organizational and technical boundaries.
• Skill in creating technical documentation.
• Skill in translating operational requirements into security controls.
• Skill in performing risk-based gap analysis.
• Skill in identifying gaps in control system network and connectivity architecture.
• Skill in designing and specifying OT systems.
• Skill in interpreting OT network drawings and performing zone/conduit requirement analysis.
• Skill in reviewing access control lists and firewall rules.

Exact compensation may vary based on items such as skills, experience and location. The salary range for this position is: $78,000 - $152,000.

At Viatris, we offer competitive salaries, benefits and an inclusive environment where you can use your experiences, perspectives and skills to help make an impact on the lives of others.

Viatris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, gender expression, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.