OT/IT Cyber Security Senior Engineer

TITLE:

OT/IT Cyber Security Senior Engineer

Title: OT/IT Cyber Security Senior Engineer

Reports To: Chief Information Security Officer

Location: Raleigh, NC

Indivior is a global pharmaceutical company working to help change patients' lives by developing medicines to treat substance use disorders (SUD). Our vision is that all patients around the world will have access to evidence-based treatment for the chronic conditions and co-occurring disorders of SUD. Indivior is dedicated to transforming SUD from a global human crisis to a recognized and treated chronic disease. Building on its global portfolio of OUD treatments, Indivior has a pipeline of product candidates designed to expand on its heritage in this category.

Indivior was founded to help tackle the opioid crisis, one of the largest and most urgent public health emergencies of our time.  Our purpose is to bring science-based, life-transforming treatments to patients.  We strive to help eliminate the stigma of addiction.  We take our role as a responsible steward extremely seriously and commit ourselves to cultivating our unique culture and highest standards of integrity.

We are driving forward our understanding of addiction and other serious mental health illnesses to create new science that will help pave the way for an even deeper understanding of patient needs and treatment innovation.  We engage at all levels across the addiction treatment spectrum, interacting with governments, key opinion leaders, physicians, payers, patients, and patient advocacy groups to raise awareness and educate about addiction as a chronic, relapsing disease.

Connect with Indivior on LinkedIn by visiting www.linkedin.com/company/indivior.

POSITION SUMMARY:

The Cybersecurity Specialist at Indivior secures and ensures compliance of all systems and networks in both manufacturing and IT, globally. Key duties include conducting vulnerability scans, ranking risks, and executing remediation plans. The role involves designing, configuring, monitoring, and maintaining firewalls, as well as designing network segmentation strategies. Compliance with FDA and DEA regulations requires meticulous record-keeping. The specialist must develop incident response plans for security breaches, manage user access to sensitive data, and conduct security awareness training for staff.

The role also covers general IT security engineering, which includes designing, maintaining monitoring solutions to detect suspicious activities, overseeing Active Directory management, Cloud services security (AWS & Azure), and ensuring timely security patches with IT and OT teams. Vendor management is another responsibility, involving the selection and coordination of third-party security services. This position is crucial for protecting Indivior’s production processes and global IT infrastructure.

ESSENTIAL FUNCTIONS:

The responsibilities of this role include, but are not limited to, the following:

• Vulnerability Management: Regularly scan and assess both IT and manufacturing systems for vulnerabilities, prioritize them based on risk, and implement remediation plans to mitigate potential threats.
• Firewall Management: Configure, monitor, and maintain firewalls to protect the manufacturing network from unauthorized access and cyber threats, ensuring optimal performance and security.  Create and sign off on Firewall security design for IT networks including on prem as well as Azure and AWS networks.
• Secure Configurations: Develop and enforce secure configuration standards for IT and manufacturing systems and devices, ensuring they are hardened against cyber-attacks.
• Compliance Management: Implement and manage controls to ensure compliance with FDA and DEA regulations, including maintaining accurate records and documentation for audits.
• Incident Response: Develop and execute incident response plans to quickly and effectively address security breaches or other cyber incidents within the manufacturing and IT environments.
• Network Segmentation: Maintain & implement network segmentation strategies to isolate critical manufacturing systems from less secure areas of the network, reducing the risk of lateral movement by attackers.
• Access Control: Manage user access controls, ensuring that only authorized personnel have access to sensitive systems and data, and regularly review access permissions.  Includes Active Directory management.
• Security Awareness Training: Conduct regular security awareness training for staff to ensure they understand and follow b