About this role
About the Role The Senior Security Engineer at Roche Manufacturing Cybersecurity Engineering protects Roche manufacturing systems and networks against cybersecurity threats. This role provides local architecture and engineering support to keep the manufacturing environment up to date with Roche Manufacturing Cybersecurity standards, baselines and industry best practices. What You'll Do
- Take part in technical design reviews, integration, testing, and documentation activities concerning new OT systems and/or changes to existing manufacturing system or infrastructure
- Support development of Manufacturing Cybersecurity standards and baselines
- OT Cybersecurity Advisor during OT System planning phase and OT System Risk Assessment process
- Advise System Owners in selecting appropriate security measures to mitigate risk
- Coordinate OT services and activities delivered by Vendors
- Review local technical designs as part of Manufacturing Cybersecurity Requests (in ServiceNow)
- Design and sustain OT Security Monitoring (IIDS) at the Manufacturing Site
- Provide technical support during Incident Response process including steps to minimize the impact, conduct a technical and forensic investigation into how the breach happened and the extent of the damage
- Work closely with System Owners, Cybersecurity Site Representative and be a catalyst for cross-site collaboration on topics related to Manufacturing Cybersecurity
- The Senior Security Engineer is a member of the Manufacturing Cybersecurity Engineering team led by the Head of Manufacturing Cybersecurity Engineering and part of the Security Platforms subfunction in the Information Security function at Roche. What We're Looking For
- Strong experience in manufacturing cybersecurity for OT environments and protection of manufacturing systems and networks
- Ability to design, review and implement security controls, baselines, and standards aligned with Roche policies
- Experience with incident response, forensic investigations, and security monitoring (IIDS)
- Proactive stakeholder management, ability to influence and coordinate cross-site teams and vendors
- Mentorship experience and ability to develop security best practices within a team
- Strong communication and collaboration skills to work with System Owners and cross-functional teams