OT Security Architecture Lead

Lonza•Portsmouth, NH

15h•Onsite

About The Position

We are looking for an OT Security Architecture Lead to design, implement, and govern robust cybersecurity architectures across all systems and networks, ensuring conformance to security best practices and driving the integration of multilevel security controls, from on-premise industrial systems to cloud environments. The actual location of this job is in Portsmouth, NH, US. Relocation assistance is available for eligible candidates and their families, if needed. What you will get : An agile career and dynamic working culture. An inclusive and ethical workplace. Compensation programs that recognize high performance. Medical, dental and vision insurance. Our full list of global benefits can be found here: https://www.lonza.com/careers/benefits.

Requirements

Bachelor / Master within Computer Science / Cyber Security or similar experience
Knowhow in IT network / Cloud solutions and application security, with 6-10 years of relevant experience
Analytical skills
Experience with Project methodology
Good understanding of time management
Effective collaboration, communication, presentation and moderation skills
Proficient in English, ideally a good level of German as well

Responsibilities

Develop/integrate/maintain cybersecurity designs for systems and networks with multilevel security requirements.
Perform security reviews, identify gaps in security architecture, and develop security risk mitigation action plan.
Evaluate (security) architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements, security guidelines and security best practices.
Determine the protection needs (i.e., security controls, system hardening) for the information system(s) and network(s) and document them appropriately.
Research and implement updated security standards, systems, and best practices to create reliable cloud security architectures.
Assess and ensure conformance to security concepts and functions (e.g., authentication/audit enforcement, data anonymization, SSL security, API security, REST/JSON processing, microservices, Infrastructure as a code and containers).