Senior Manager, Cyber Security Engineering; Plant Security

Company Overview

Bridgestone Americas, Inc. (BSAM), headquartered in Nashville, Tennessee, and Bridgestone Europe, Middle East and Africa (BSEMEA), headquartered in Brussels, Belgium, operate collectively as a “Bridgestone West” strategic region. This region services the strategic business needs of teams across the Americas, Europe, Middle East and Africa. BSAM and BSEMEA are subsidiaries of Bridgestone Corporation, globally headquartered in Japan. Bridgestone and its subsidiaries develop, manufacture and market a wide range of Bridgestone, Firestone and associate brand products and solutions to address the needs of a broad range of customers and industries.

Information Technology

The Senior Manager, Cyber Security Engineering for Manufacturing & Retail Security establishes and governs safeguards for manufacturing and retail IT systems; securing production networks, sensitive data, and operational technologies against cyber threats while ensuring compliance with industry standards. This role advances cybersecurity maturity and collaborates with IT teams to implement strategic improvements. The role is responsible for designing, implementing, and maintaining secure data, network, and industrial control system (ICS) infrastructures within the manufacturing and retail environments;

it focuses on protecting and defending both IT systems (servers, workstations, cloud platforms) and operational technology (OT) such as SCADA, PLCs, and IoT devices used in manufacturing and retail processes. The manager partners with the business and other IT teams to define appropriate cybersecurity measures to mature security through the NIST framework.

• Ownership of short to mid-term (1-3 years) execution of functional strategy and the operational direction of the department.
• Drive continuous improvement in the security of the manufacturing and retail environments with a goal of enabling the business while balancing security and functionality.
• Design and implement security solutions:
  Develop robust IT and OT security architectures to protect retail and manufacturing networks and industrial control systems.
• Vulnerability management:
  In partnership with TDR, conduct routine penetration testing, vulnerability assessments, and risk analyses to identify and remediate security weaknesses.
• Protect against threats:
  Assist with the deployment of IDS/IPS, and endpoint security tools to assist in the protection against security incidents and breaches.
• Respond to threats:
  Respond to security breaches and coordinate forensic investigations within a high-stakes production and retail environment.
• Compliance and documentation:
  Ensure adherence to frameworks like NIST, ISO 27001, IEC 62443 for industrial cybersecurity, and partner with GRC to maintain policies, standard operating procedures, and audit logs. Update and maintain security policies and compliance documentation.
• Collaboration:
  
  Work with IT, production, software development, and compliance teams to integrate cybersecurity measures into manufacturing and retail processes. Integrate cybersecurity best practices into ongoing production and software development projects.
• Training and awareness:
  Educate plant staff and IT personnel on security best practices and social engineering prevention.
• Manage and develop a team of cybersecurity professionals. Provide guidance and mentoring to junior cybersecurity personnel.
• Advise, govern, and influence manufacturing and retail leaders on security needs.

• Technical skills:
  Networking protocols, firewall management (Palo Alto and Fortinet), intrusion detection systems, endpoint protection, cloud security (AWS, Azure), scripting languages (Python, Bash, Power Shell), and vulnerability scanners.
• Knowledge of OT systems:
  Familiarity with SCADA, PLCs, DCS, and industrial communication protocols like Modbus, OPC-UA, and Ethernet/IP
• Knowledge of Retail systems:
  Familiarity with retail security design and PoS system security
• Experience with on-prem and cloud environments related to manufacturing and retail
• Experience with establishing zero-trust architectures and segmentation
• Understanding of…