Job Summary
This position combines hands on experience, strong technical depth in network and endpoint engineering with mature cybersecurity leadership. The incumbent serves as a corporate subject‑matter expert and escalation point for infrastructure and security incidents, partners closely with Manufacturing, Quality, and Engineering leaders on IT/OT convergence, and ensures that controls align with recognized frameworks (NIST CSF 2.0, NIST 800-82r3, IEC 62443) and applicable regulations (ISO 27001, GDPR). In addition to technical ability, the role requires excellent judgment, customer service, team leadership, coaching, process improvement, and technical writing skills. Supports approximately 2000 end users across 6 manufacturing sites and offices in the Americas and Europe. Directly leads a hybrid team across several locations, including contract and managed services. Protects a mixed IT/OT estate including corporate networks, datacenters, cloud tenants (M365, Azure/AWS), manufacturing networks, PLCs/HMIs, historians, MES, and lab systems.
Cybersecurity Strategy & Operations
Lead the enterprise cybersecurity program aligned with NIST CSF and OT security standards (e.g., NIST 800‑82, IEC 62443).
Oversee day‑to‑day security operations including SIEM/SOAR, EDR/XDR, vulnerability management, email security, DLP, IAM, and incident response.
Serve as incident commander for significant security events and drive continuous improvement through tabletop exercises and lessons learned.
Own cloud security posture for M365 and Azure and/or AWS.
OT / ICS Security & IT‑OT Convergence
Partner with Manufacturing Engineering and site leadership to secure OT environments (PLCs, HMIs, MES, historians, lab systems).
Design and maintain IT/OT network segmentation and secure remote access while respecting safety, uptime, and validation constraints.
Develop site‑level cyber incident response playbooks addressing both cyber and operational impact.
Risk, Compliance & Governance
Ensure compliance with applicable regulations and standards (e.g., ISO 27001, ISO 13485, GDPR).
Maintain cybersecurity risk register, treatment plans, and executive reporting.
Lead third‑party and supply‑chain security risk assessments and support audits.
Leadership & Delivery
Lead and develop a globally distributed team, including internal staff and managed service partners.
Deliver cybersecurity initiatives on time and on budget with clear metrics and executive‑ready reporting.
Build strong cross‑functional partnerships and translate technical risk into business impact.
Location:
Orangeburg, SC (Hybrid) |
Travel:
~20–30%
Required
Bachelor’s degree in IT, Cybersecurity, Engineering, or equivalent experience.
8–10+ years of progressive IT experience, including 3–5+ years in infrastructure and/or cybersecurity leadership.
Experience securing multi‑site, multinational environments, ideally in manufacturing or other regulated industries.
Hands‑on experience across core cybersecurity domains (IAM, IR, EDR/XDR, vulnerability management, cloud security).
Demonstrated experience securing OT/ICS environments and partnering with Manufacturing and Engineering teams.
Strong communication skills with the ability to influence senior leaders.
Preferred
Certifications such as CISSP, CISM, CCSP, CRISC, or OT/ICS credentials (e.g., GICSP, IEC 62443).
Experience in FDA‑regulated, medical device, or life sciences environments.
Experience with IT service management frameworks (ITIL, Agile).
Second‑language proficiency supporting a European footprint.