Senior Cyber Security Architect, OT

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where 'Health for all Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice.

Senior Cyber Security Architect, OT 

YOUR TASKS AND RESPONSIBILITIES

The primary responsibilities of this role, Senior Cyber Security Architect OT are to:  

This role contributes technically in defining and assessing Bayer’s security strategy, technical architecture and practices. They translate business objectives and risk management strategies into specific security controls enabled by security technologies and services.  Provide advanced technical security architectural design for complex applications and platforms.

• Contribute to and utilize our robust Security Controls Framework to ensure the specification of Security Solutions across Bayer is done in a controlled and rational way over applicable technical domains, such as network, cloud, application, platform and AI security;

• Design and develop tailored cybersecurity designs that address specific threats, oversee the selection and deployment of security technologies, ensuring proper integration into existing IT infrastructure. Anticipate and maintain compliance with applicable legal, regulatory, and best practice frameworks, including the CIISecSkills Framework;

• Strategic alignment IT security requirements with business goals using industry standard architecture frameworks, such as TOGAF and SABSA; integrating security into the SDLC, while leading the design and review of complex security architectures to meet business needs;

• Realize ‘Security by Default’ by creating and maintaining the relevant Security Standards and Security Architecture Patterns to ensure doing business securely is the easiest way to do business;

• Providing advanced technical guidance and expertise to engineering and development teams on secure system design, configuration, and implementation;

• Staying abreast of emerging cyber security threats, vulnerabilities, and technologies, and furnishing recommendations for proactive security measures and defensive strategies;

• Work across Bayer to foster a unified cyber security approach, leading cybersecurity initiatives or teams with a focus on risk management and Key Tasks: security architecture;

• Maintain security control sets, Standards and Architecture Patterns specific to the Industrial & OT domain, ensuring the business has the guidance to deploy such systems securely and safely;

• Maintain compliance with relevant standards such as NERC CIP or ISA/IEC 62443 for OT security.

WHO YOU ARE

Bayer seeks an incumbent who possesses the following:

Required Qualifications:

• Demonstrated extensive experience in cybersecurity architecture, risk management, and the design of secure networks and systems is crucial. Technical Proficiency: In-depth knowledge of cybersecurity principles, IT infrastructure, and network architecture is required;

• Proven expertise in conducting risk assessments and developing strategic mitigation plans to address identified vulnerabilities;

• Exceptional verbal and written communication abilities to clearly articulate cybersecurity policies, strategies, and risks to stakeholders at all levels;

• Creative and critical thinking is necessary to address complex cyber security challenges effectively;

• Familiarity with relevant cybersecurity frameworks and standards, including the CIISecSkills Framework and guidelines provided by the NCSC, is essential;

• VACC Leadership Skills.

Preferred Qualifications:

• Bachelor’s or Master’s degree in Information technology, cybersecurity, computer science, or a related field is essential, though relevant working experience may be considered an equivalent;

• Holding professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or certifications recognized by the NCSC is highly regarded;

• Holding advanced certifications such as CISSP-ISSAP or SANS GIAC Security Architect (GDSA) are advantageous;

• [5+] years of experience in cybersecurity, previous experience in a security engineering role highly desired;

• Holding professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or certifications recognized by the NCSC is highly regarded.

Employees can expect to be paid a salary between $126,313 to $189,469.  Additional compensation may include a bonus or commission (if relevant).  Additional benefits include health care, vision, dental, retirement, PTO, sick leave, etc..  This salary range is merely an estimate and may vary based on an applicant’s location, market data/ranges, an applicant’s skills and prior relevant experience, certain degrees and certifications, and other relevant factors.

This posting will be available for application until at least 1/17/2025.