Expert Security Engineer - Manufacturing Cybersecurity — Roche

Descrizione completa

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position The Senior Security Engineer plays a vital role in protecting Roche Manufacturing systems and networks against cybersecurity threats. This role is responsible for local architecture and engineering support, helping system owners and administrators in keeping their manufacturing environment up to date with the latest Roche Manufacturing Cybersecurity standards, baselines and industry best practices. Some of this role’s responsibilities are:

• Taking part in technical design reviews, integration, testing, and documentation activities concerning new OT systems and/or changes to existing manufacturing system or infrastructure
• Supporting development of Manufacturing Cybersecurity standards and baselines OT Cybersecurity Advisor during OT System planning phase and OT System Risk Assessment process
• Advising System Owners in selecting appropriate security measures to mitigate risk
• Coordinating of OT services and activities delivered by Vendors
• Reviewing local technical designs as part of Manufacturing Cybersecurity Requests (in ServiceNow)
• Designing and sustaining OT Security Monitoring (IIDS) at the Manufacturing Site
• Providing technical support during Incident Response process including steps to minimize the impact, conducting a technical and forensic investigation into how the breach happened and the extent of the damage
• Working closely with System Owners, Cybersecurity Site Representative and is a catalyst for cross-site collaboration on topics related to Manufacturing Cybersecurity The Senior Security Engineer is a member of the Manufacturing Cybersecurity Engineering team led by the Head of Manufacturing Cybersecurity Engineering and part of the Security Platforms subfunction in the Information Security function at Roche. Job Responsibilities
• Independently manages end-to-end security analysis tasks across various capabilities and contributes to more complex problems
• Mentors more junior team members and contributes to the development of security best practices
• Stakeholder Management
• Identifies a diverse range of security stakeholders across functional areas and effectively manages relationships to build reliance through deep business and technical understanding, acting as a trusted advisor
• Acts as a strategic influencer, defining and driving stakeholder engagement strategies for complex initiatives, facilitating workshops, resolving conflicts, and proactively shaping stakeholder perspectives to align with project goals
• Impact/Strategy
• Demonstrates strong and consistent performance across diverse products, with an impact that typically extends to a specific product, initiative, or cluster
• Translates requirements into strategic implementation plans that align with overall business objectives, and takes a proactive role in shaping team processes Complexity
• Manages business analysis activities on more complex projects or across multiple products within a domain
• Capable of handling ambiguous requirements, navigating intricate stakeholder environments, and evaluating solution impacts considering both immediate and longer-term implications within the domain
• Business/Technical ability
• Demonstrates a strong understanding of the business domain, related technologies, and their interdependencies
• Can independently apply tools, principles, concepts, and techniques related to requirements, data, usability, and process analysis, effectively managing interconnections to improve overall efficiency and effectiveness Qu