Sr. Manager InfoSec Operations-Plants

Philip Morris International U.S.; Tampa (FL); On-site; USD 160,000 - 200,000; Full time

Job summary

Philip Morris International U.S. is seeking a senior Information Security professional to lead cyber risk management for manufacturing and OT environments.

You will drive security governance, risk assessments, and program implementation, coordinating with business and technology teams to enhance cyber resilience. The role requires extensive OT security experience, strong leadership, and a deep understanding of ICS/SCADA, with the ability to influence stakeholders and align security initiatives

Qualifications

• 7+ years in information security with risk management, governance, auditing or disaster recovery.
• 5+ years of leadership experience managing teams.
• 3+ years of OT security in industrial environments (ICS/SCADA).
• Experience securing ICS/OT environments and implementing cyber risk programs.

Responsibilities

• Lead cybersecurity stakeholder engagement across manufacturing and operational environments.
• Partner with leadership to advance Cyber Risk Program initiatives and remediation.
• Provide cybersecurity guidance, training, and advisory support to business and plant stakeholders.
• Coordinate security assurance and risk management for IT/OT projects and initiatives.
• Conduct security assessments of facilities, third-party sites, and industrial environments.
• Monitor IT/OT security posture including network segmentation and patching.
• Drive risk mitigation activities across technology portfolios.
• Support incident response with OT expertise and corrective action coordination.

Skills

Information security leadership

Risk management

OT/ICS security

Governance & audits

Project management

Education

BS/BA in Computer Science or related field

Certifications: CISSP, ISSMP, CRISC, CISA, CISM, ISO 27001, GICSP, ISA/IEC 62443

Job description

As part of the Information Security Operations (InfoSec Ops) team, you will lead cybersecurity risk management for PMI U.S. manufacturing facilities and OT-related business and technology environments. This role is responsible for security governance, risk assessment, stakeholder engagement, Cyber Risk Program (CRP) implementation, and collaboration across business and technology teams to improve cyber resilience.

Role

• Lead cybersecurity stakeholder engagement, reporting, and awareness initiatives across manufacturing and operational environments.
• Partner with manufacturing leadership to advance Cyber Risk Program initiatives and drive remediation efforts.
• Provide cybersecurity guidance, training, and advisory support to business and plant stakeholders.
• Coordinate security assurance and risk management activities for IT and OT projects. - Support implementation of annual Cyber Risk Program initiatives aligned with business priorities and threat intelligence.
• Conduct security assessments of manufacturing facilities, warehouses, third-party manufacturers, and other industrial environments to identify risks and remediation opportunities.
• Monitor IT/OT security posture, including network segmentation, vulnerability management, patching, access controls, disaster recovery, system lifecycle management, and security control effectiveness.
• Perform cyber risk assessments and drive risk mitigation activities across technology portfolios.
• Support cybersecurity incident response activities by providing OT expertise and coordinating corrective action plans.

Required Experience

• 7+ years of information security experience, including risk management, governance, auditing, application security, controls management, disaster recovery, or business continuity.
• 5+ years of leadership experience managing direct, indirect, or vendor-supported teams.
• 3+ years of OT security experience, including industrial network segmentation, OT monitoring,ICS patch management, and disaster recovery.
• Experience securing Industrial Control Systems (ICS), including PLCs, HMIs, DCS, SCADA, and Building Management Systems.
• Experience implementing cybersecurity programs within manufacturing, engineering, supply chain, industrialization, or similar operational environments.
• Project management experience, preferably in cybersecurity.
• Knowledge of ISA/IEC 62443, NIST 800-82, and related cybersecurity frameworks.
• Understanding of IIoT platforms, cloud architectures (IaaS, PaaS, SaaS), and Agile/DevOps environments

Preferred Qualifications

• BS/BA in Computer Science, Information Systems, Engineering, or a related field. Certifications such as CISSP, ISSMP, CRISC, CISA, CISM, ISO 27001, GICSP, GRID, or ISA/IEC 62443.
• PMP, PRINCE2, or equivalent certification.

Annual Salary Range: $160-200K

Philip Morris International (PMI) is an Equal Opportunity Employer. #PMIUS

32288