OT Cybersecurity Architect

Roche fosters diversity, equity and inclusion, representing the communities we serve. When dealing with healthcare on a global scale, diversity is an essential ingredient to success. We believe that inclusion is key to understanding people’s varied healthcare needs. Together, we embrace individuality and share a passion for exceptional care. Join Roche, where every voice matters.

The Position

We advance science so that we all have more time with the people we love. This position provides the opportunity to play a key role in securing Roche’s US based diagnostics manufacturing facilities. The sites employ integrated and automated computer control systems to manage plant operations and manufacturing data.  The Cybersecurity Architect plays a vital role in protecting Roche manufacturing systems and networks against cyber threats. This role is responsible for strategic decisions in architecture, engineering, and technologies keeping the site manufacturing environments up to date with the latest Roche Manufacturing Cybersecurity standards and industry best practices. You will implement and design standardized concepts and processes and be responsible for their implementation. You will achieve this by working with local cybersecurity engineers and partners at respective locations.

The Opportunity

Active involvement in the implementation of the Diagnostics OperationsCybersecurity Governance Model including Plan, Design, Build and Release, Operate and Maintain. 

This include activities like:

• Implement the defined operations cybersecurity strategy at multiple locations (in the US) in cooperation with the business and service functions

• Collaborates with the internal global cybersecurity community to find process improvements and drive governance

• Translate global strategies into specific local (OT) strategies and architectures in a targeted manner

• Represent defined operations sites in corresponding audits and coordinate the processing of any gaps

• Cooperate with global informatics colleagues for the adoption and implementation of global IT/OT service offerings into local manufacturing environments

• Advise and coordinate with site OT CS Engineers on the implementation on cybersecurity-relevant topics for the areas supported

• You continuously analyze the market for new and suitable solutions and coordinate their introduction with local and global teams

• OT Cybersecurity Advisor during OT System planning phase

• Supports manufacturing System Risk Assessment process

• Developing site specific project plans for implementation of strategic cybersecurity initiatives

• Contribute and work together with the Swiss based Global Operations CS Governance team

Who You Are

• Bachelor’s degree ( Master preferred ) in Computer Engineering, Computer Science, Automation Engineering or similar

• 5+ years of experience in cybersecurity, preferably with a focus on manufacturing or

• 8+ years of experience in cybersecurity, preferably with a focus on manufacturing and deploying strategic initiatives at a regional or global setting

• Certified Information System Security Professional (CISSP), ISA/IEC 62443 Cybersecurity Specialist certification, Global Industrial Cyber Security Professional (GICSP); is preferred

Leadership skills

• Attention to details and good problem-solving skills

• Ability to multi-task with a calm behavior and work under pressure

• Good team player, self-confident, motivated, and independent

• Strong coordination and facilitation skills to operate the interface between governance and implementation

• Ability to communicate with and influence stakeholders and leadership at multiple levels

• Planning, researching and developing security policies, standards and procedures

• Experience working in the life sciences industry or similar regulated environment

• Ability to travel ~20%, sometimes internationally

Technical skills

• Expertise in anti-virus software, intrusion detection, firewalls and content filtering in OT

• Knowledge of risk assessment tools, technologies and methods

• Expertise in designing secure networks