Senior Manager, Operational Technology Security
Asia Pacific-India-Karnataka-Bangalore
Kenvue
Everyday care is a powerful catalyst in making you feel better, inside and out. Learn about the iconic brands, products, people, and history that make up Kenvue.Description
Kenvue is currently recruiting for:
OT Security, Senior Manager
Role is based in Bangalore, India
Who we are
At Kenvue, we realize the extraordinary power of everyday care. Built on over a century of heritage and rooted in science, we’re the house of iconic brands - including Neutrogena, Aveeno, Tylenol, Listerine, Johnson’s and BAND-AID® Brand Adhesive Bandages that you already know and love. Science is our passion; care is our talent. Our global team is made up of ~ 22,000 diverse and brilliant people, passionate about insights, innovation and committed to delivering the best products to our customers. With expertise and empathy, being a Kenvuer means having the power to impact the life of millions of people every day. We put people first, care fiercely, earn trust with science and solve with courage – and have brilliant opportunities waiting for you! Join us in shaping our future–and yours. For more information, click here.
What will you do
As the Manager of Operational Technology (OT) Security, you will be responsible for managing the product of OT security through independent engineering and deployment of security capabilities while creating a positive user experience. You are responsible for providing specialized cybersecurity support across the operational business segments. This includes taking an active leadership role in determining company-wide cybersecurity technology within the OT environments. Also, as the manager of OT security you will be responsible for assisting in the development, management, and implementation of the OT cybersecurity roadmap for the OT environment as part of Kenvue’s overall cybersecurity initiative. You will collaborate with multiple groups across security, engineering and architecture, and IT operations as well as other non-IT technology owners. You will also oversee the operation of OT security tools to ensure they address risk and threat to the company.
Key Responsibilities:
- Develop and execute the strategy, vision, and architecture of the OT security product
- Expert understanding of security standards (ICS/SCADA and IIOT) and underlying principles of networking, infrastructure, cloud, and system integration.
- Create OT-ICS cybersecurity guardrails to ensure all OT architectures, solutions and technologies across the company are built using the secure-by-design methodology
- Utilize industry standards and frameworks (e.g., NIST-800-53/82, ISA/IEC-62443) to identify capabilities and technologies to provide enhanced cyber defenses
- Provide recommendations and plans to mitigate identified issues from OT/ICS cybersecurity risk assessments, and ICS vulnerability assessments
- Work with Business Groups to craft modernization plans for legacy equipment and technologies
- Create opportunities for efficiencies through innovative strategic decisions balancing cost and quality while maintaining appropriate levels of security.
- Actively engage with and shape industry trends in cybersecurity capabilities and tooling.
- Partner with security and enterprise architects to identify and evaluate emerging technologies
- Deliver high quality work outcomes and customer service in a high-pressure, fast paced setting to meet company needs.
- Influence and educate stakeholders at an enterprise level on OT Cyber initiatives
Qualifications
What we are looking for
- A bachelor’s degree or equivalent by track-record of successful enterprise experience. Graduate degree preferred.
- 12+ years of experience with a strong background in OT security, network design and architecture, and experience working in a regulated environment
- Advanced understanding of network fundamentals and network security design, including the ability to develop network illustrations for industrial automation and control systems
- Experience working with SCADA/modern SCADA, , PLC, EMS-including connected technologies. Experience should cover communication protocols, such as TCP/IP, Modbus, IEC 61850, OPC, OPC UA and PROFINET
- Application of leading security standards and best practice guidelines (e.g. NIST CSF, ISO27001:2013:2022, (ISA)/IEC 62443 series of standards, NIS regulations, CIS Benchmarks
- Leading awareness of IT/OT security trends and common vulnerabilities. Experience should cover how to develop pragmatic remediation solutions and/or fixes against an organization’s threat landscape and cyber risk profile
- Demonstrated understanding of OT/ICS critical infrastructure in the Consumer Health, or similar industry including an understanding of threats, vulnerabilities, attack paths and exploits in an OT/ICS environment
- Experience with selecting, designing, architecting, and deploying security technologies to an OT/ICS environment
- Demonstrated OT cybersecurity project experience including leading the development of security architectures (programs) and secure network architectures (systems)
- Excellent people management and employee relations skills.
- Strong leadership presence, influencing, collaboration, communication information-sharing and organizational skills.
- Proven track record of innovation and continuous improvement.
- Expert at working with virtual, and diverse global teams of varied backgrounds and cultural experiences.
- Excellent written and oral communication skills with experience communicating highly conceptual designs to executives, mid-level management, and peer engineers.
- Customer service orientation, eye for business value, and a bias for action.
- Exercises independent judgment, strong decision making and problem solving for key processes.
- Experience with zero trust architecture.
- A strong track record of working in cyber security and industrial automation
- Familiarity with cloud and OT/ICS integration
- Certifications in security
- Graduate degree
- Experience within regulated environments (GxP or SoX)
Kenvue is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identify, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
#LI-AK3
Primary Location
Asia Pacific-India-Karnataka-BangaloreJob Function
Information Security* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Automation Cloud Exploits ICS IEC 61850 IEC 62443 Industrial ISO 27001 Modbus Network security NIST NIST 800-53 PROFINET Risk assessment SCADA SOX Strategy TCP/IP Vulnerabilities Zero Trust
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.