Cybersecurity Manager

Summary

The Cybersecurity Manager (High-Tech Manufacturing & Semiconductors) leads the strategic alignment, implementation, and management of the organization's information and operational security frameworks. This role bridges the gap between complex enterprise risk strategies and practical technical engineering controls. Operating in a high-value manufacturing environment, this manager is primarily responsible for Governance, Risk, and Compliance (GRC), while possessing the technical fluency required to collaborate effectively with IT, Operational Technology (OT), and engineering teams. The core mission is to protect proprietary intellectual property (IP), secure advanced fabrication supply chains, ensure operational uptime, and maintain audit readiness against global regulatory standards.

Responsibilities

• Core Governance, Risk & Compliance (GRC) Responsibilities
• Framework Alignment: Define, execute, and mature information security policies mapped explicitly to ISO/IEC 27001, NIST SP 800-53, and semiconductor industry specifications (e.g., SEMI cybersecurity standards).
• Risk Management & Audits: Lead formal risk assessments across corporate networks. Manage internal and external audits, compiling risk registers and mapping mitigation paths.
• Third-Party Supply Chain Security: Establish comprehensive vendor assessment criteria to evaluate and continually audit external component suppliers, equipment manufacturers, and outsourced service providers.
• Regulatory Compliance: Coordinate and ensure enterprise compliance with international regulations relevant to manufacturing data flows, including GDPR, export control constraints, and client-specific data non-disclosure mandates.
• Incident Response Governance: Design, maintain, and run periodic simulation tabletops for the Cyber Incident Response Plan, ensuring clear communication pathways between executive stakeholders, legal counsel, and technical investigators.
• Technical Oversight & Collaboration
• OT/ICS Collaboration: Interface directly with operational technology and SCADA engineering teams to ensure GRC baselines extend to automated fabrication equipment, testing cleanrooms, and physical plant networks without disrupting production availability.
• Architectural Alignment: Review technical designs for Identity & Access Management (IAM), network zoning/micro-segmentation, and zero-trust remote access architecture to ensure strict compliance with internal security baselines.
• Vulnerability Lifecycle Management: Collaborate with security operations and IT engineering to translate vulnerability scan results and penetration testing findings into prioritized, risk-based remediation plans for production-critical servers and workstations.

Qualifications

Education

• Bachelor's degree in computer science, Information Security, Management Information Systems (MIS), Engineering, or a related field (or equivalent practical experience).

Experience

• 5+ years of progressive experience in cybersecurity or IT risk management, with a minimum of 2 years in a dedicated leadership or management function within a manufacturing, aerospace, automotive, or semiconductor environment.

Preferred

• Technical Knowledge Base: Deep familiarity with network security constructs, IAM platforms, endpoint protection suites, SIEM logging architectures, and automated asset inventorying tools.

Licenses/certifications

• Industry Certifications: Professional management credentials are highly preferred (e.g., CISM, CISSP, CRISC, or CISA).

Location

This position will be on-site based in Sugar Land, Texas.

Why AOI?

In addition to competitive salary, AOI offers

• Flexible and competitive health (medical, dental, vision) plans offer the employee with the right options to meet individual and family needs
• Employer matching on 401(k) deferrals
• Generous PTO policy, with unused PTO payout at end of the year
• Relocation package available within US
• Immigration sponsorships (Must be currently authorized to work in the US)