The primary purpose of the Senior Manager, Manufacturing Security, is to lead the delivery and maturation of cybersecurity capabilities across Viatris' manufacturing environment. The role partners with Global Security to translate established cybersecurity requirements into practical solutions and leads the implementation of security controls and capabilities across manufacturing sites and operational technology environments. The role works closely with manufacturing stakeholders to understand site priorities, technology environments, operational constraints, and business needs and integrates global cybersecurity requirements into site-level plans and execution. The role leads security capabilities through implementation and maturation, transitioning established capabilities to appropriate operational teams while retaining responsibility for selected services where required.

Key responsibilities for this role include:

• Lead the delivery and maturation of cybersecurity capabilities across manufacturing sites and operational technology environments, translating established requirements into executable solutions and implementation plans.
• Establish and maintain strong relationships with manufacturing leadership and technical stakeholders to understand site priorities, operational constraints, technology environments, and planned initiatives.
• Develop and maintain manufacturing cybersecurity delivery roadmaps that align security requirements with manufacturing priorities, technology lifecycle needs, site readiness, and available resources.
• Lead the design, implementation, and integration of cybersecurity controls within manufacturing and OT environments.
• Coordinate cybersecurity delivery across manufacturing sites and regions, establishing repeatable implementation approaches while accommodating legitimate site differences.
• Identify gaps in OT architectures and implementation dependencies and coordinate remediation with Manufacturing, Engineering, IT, Global Security, and other stakeholders.
• Lead cybersecurity reviews of manufacturing technology initiatives and engineering plans to ensure established security requirements are incorporated into implementation.
• Drive maturation of manufacturing cybersecurity capabilities through sustainable processes, documentation, metrics, support models, and continuous improvement.
• Oversee transition of mature cybersecurity capabilities to appropriate operational teams, including ownership, documentation, knowledge transfer, and support requirements.
• Manage selected manufacturing cybersecurity capabilities and services where ongoing ownership remains with the Manufacturing Security team.
• Communicate the implications of new and upgraded manufacturing technologies and provide actionable cybersecurity recommendations to key stakeholders.
• Lead and develop the Manufacturing Security team and prioritize the delivery portfolio across sites and regions.
• Develop cybersecurity countermeasures and risk mitigation strategies appropriate to technology and business requirements.
• Maintain stakeholder communication channels and cross-team relationships required for successful cybersecurity delivery.
• Support configuration and change management practices for security capabilities throughout implementation and transition.
• Perform or support risk and vulnerability assessments to inform delivery priorities and remediation activities.
• Create and maintain technical documentation necessary to support sustainable operation and knowledge transfer.

The minimum qualifications for this role are:

• Minimum of a Bachelor's degree required. Master’s degree preferred.
• Specialization in MIS, IT, Engineering, Cybersecurity, or related field, however, a combination of experience and/or education will be taken into consideration.
• 7 years’ experience in IT, Cybersecurity, Manufacturing Technology, or Operational Technology required.
• CISSP, CISM, GICSP, ISA/IEC 62443 or equivalent relevant certification preferred.
• Knowledge of cybersecurity principles and practices.
• Knowledge of risk management processes.
• Knowledge of change management processes.
• Knowledge of OT cybersecurity compliance requirements and best practices.
• Knowledge of control system environment risks, threats, and vulnerabilities.
• Knowledge of Purdue Model levels and control system network architectures.
• Knowledge of operational priorities and life cycle management principles and practices.
• Knowledge of OT assets, protocols, and asset management principles.
• Skill in communicating complex concepts to technical and business stakeholders.
• Skill in collaborating with others across organizational and technical boundaries.
• Skill in creating technical documentation.
• Skill in translating operational requirements into security controls.
• Skill in performing risk-based gap analysis.
• Skill in identifying gaps in control system network and connectivity architecture.
• Skill in designing and specifying OT systems.
• Skill in interpreting OT network drawings and performing zone/conduit requirement analysis.
• Skill in reviewing access control lists and firewall rules.

Exact compensation may vary based on items such as skills, experience and location. The salary range for this position is: $95,000 - $193,000.

At Viatris, we offer competitive salaries, benefits and an inclusive environment where you can use your experiences, perspectives and skills to help make an impact on the lives of others.