Security Architecture Manager

Overview The Senior Manager - Security Architecture, Network, and OT/IoT Security reports to the CISO and drives the secure design of infrastructure and operational technology environments, ensuring alignment with business risk appetite and zero-trust principles. The role partners with IT, engineering, product, and operations to protect both digital and physical assets from evolving threats. This role provides strategic and technical leadership for designing, implementing, and maintaining a secure enterprise and industrial network environment. This role owns the architecture and operations of cybersecurity controls across corporate IT, cloud connectivity, manufacturing networks, and connected-device ecosystems. Responsibilities Define and maintain the enterprise security reference architecture covering network, endpoint, cloud, and OT domains. Establish zero-trust and network segmentation standards, ensuring consistent enforcement across IT and OT. Evaluate emerging technologies and guide the adoption of secure architectures (e.g., SASE, micro-segmentation, secure connectivity for IoT devices). Own strategy and operations for perimeter, internal, and cloud network security (firewalls, NAC, IDS/IPS, VPN, proxy, DDoS, etc.). Oversee configuration baselines, policy hygiene, and threat detection in coordination with the SecOps and infra teams. Collaborate with IT infrastructure teams to ensure network performance and security are jointly optimized. Define network-level controls for vendor access, remote maintenance, and third-party integration. Develop and maintain security standards for manufacturing systems, control networks, and connected devices. Implement segmentation and monitoring between IT and OT environments to minimize lateral movement. Partner with plant operations and product engineering to secure PLCs, HMIs, gateways, and embedded components. Coordinate the vulnerability management program for OT and IoT assets, including patch strategy, risk acceptance, and compensating controls. Support secure product lifecycle from factory floor to field deployment — covering firmware signing, device onboarding, and telemetry protection. Coordinate incident response playbooks for OT/IoT security events with operations and SecOps teams. Maintain transparent communication by appropriately communicating relevant information to the larger IT team as needed. Protect Chamberlain Group's reputation by keeping information confidential. Maintain professional and technical knowledge by attending educational workshops, professional publications, establishing personal networks, and participating in professional societies. Contribute to the team effort by accomplishing related results and participating on projects as needed. Comply with health and safety guidelines and rules; managers should also ensure compliance across their teams. Motivate and lead a high-performance team by attracting, developing, engaging and retaining team members. Lead and motivate individuals and teams to create a workplace culture that is consistent with the CG mission, vision and values. Drive the performance management and compensation processes by communicating job expectations, monitoring and evaluating performance, providing feedback and facilitating employee development per the company's policies. Maintain transparent communication by appropriately communicating organization information to team through department meetings, one-on-one meetings, appropriate email, IM and regular interpersonal communications. Minimum Qualifications Education/Certifications: Bachelor's degree in business, technology or related field from an accredited college is required. Master's degree is a plus.CISSP, CISA or equivalent. Experience ~10–15 years of experience in cybersecurity, including 5+ years leading network and/or OT security functions in a global manufacturing corporation. ~ Proven experience securing hybrid IT/OT environments, large-scale networks, or connected device ecosystems. ~ Deep familiarity with regulatory and industry standards relevant to manufacturing and IoT. Knowledge, Skills, and Abilities Network architecture, routing, and segmentation best practices (Cisco, Palo Alto, Fortinet, Zscaler). Zero-trust networking, identity-aware proxies, and secure remote access patterns. Cloud networking and security (AWS VPC, Azure VNets, hybrid interconnects). Strong architecture documentation and modeling (Visio, Lucidchart, ArchiMate). Vendor and stakeholder management across IT, plant, and engineering. Excellent communication and presentation abilities for executive audiences. Leadership in cross-functional environments — guiding network engineers, architects, and OT specialists. Influence enterprise and manufacturing leadership toward secure-by-design practices. Respond decisively to network or OT security incidents with composure and clarity. #J-18808-Ljbffr