Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.
Die Position
TheExpert Security Engineeris a cornerstone of Roche’s defense, spearheading the protection of critical manufacturing systems and networks against an evolving landscape of sophisticated cybersecurity threats. You will provide expert-level architecture and engineering leadership, empowering system owners to fortify their environments in strict alignment with global standards and industry-leading best practices. Your strategic contributions will include:
- Leading technical design reviews, integration, and testing to ensure security-by-design for all new and existing OT infrastructure.
- Architecting global Manufacturing Cybersecurity standards and acting as a primary OT Cybersecurity Advisor during mission-critical system planning and risk assessments.
- Leveraging secure, corporate-compliant AI accelerators and enterprise-ready platforms to automate routine log analysis, scripting, and threat modeling, effectively minimizing defensive response times against machine-speed cyber threats.
- Providing authoritative guidance to System Owners on risk-mitigation strategies and complex security control selection.
- Orchestrating high-value OT services and vendor-delivered activities to maintain a seamless, secure operational posture.
- Vetting technical designs for ServiceNow Manufacturing Cybersecurity Requests to ensure enterprise-wide compliance.
- Engineering and optimizing next-generation Industrial Intrusion Detection Systems (IIDS) for real-time site monitoring.
- Leading technical incident response, driving forensic investigations, and executing containment strategies to mitigate breach impact.
- Catalyzing cross-site collaboration by partnering with Cybersecurity Site Representatives to harmonize global security initiatives.
Job Responsibilities
You will be a key pillar of the Manufacturing Cybersecurity Engineering team, reporting to the Head of Manufacturing Cybersecurity Engineering within Roche’s global Information Security subfunction. In this capacity, you will:
- Execute end-to-end security analysis across diverse capabilities, tackling the organization's most complex technical challenges.
- Champion the professional development of the team by mentoring junior engineers and defining the "gold standard" for security practices.
Stakeholder Management
- Cultivate high-trust relationships with executive and technical stakeholders, serving as a strategic advisor on manufacturing risk.
- Drive stakeholder engagement for complex initiatives, proactively shaping perspectives to ensure security is a business enabler
Impact/Strategy
- Deliver measurable security improvements across product clusters, ensuring all strategic plans align with broader Roche business goals.
- Transform high-level requirements into scalable implementation frameworks that future-proof our manufacturing environments.
Complexity
- Orchestrates business analysis and strategic oversight across highly complex, cross-functional project portfolios and multi-product domains.
- Navigates ambiguity to define clear project trajectories, manages intricate stakeholder ecosystems, and evaluates the cascading long-term implications of critical architectural and security decisions.
Business/Technical ability
- Commands a deep, holistic understanding of the business domain, associated technology stacks, and their complex interdependencies.
- Independently synthesizes advanced tools, principles, and methodologies for requirements, data, usability, and process analysis to engineer solutions that maximize operational efficiency, security posture, and systemic effectiveness.
Qualifications
Education / Experience
- Proven expertise in architecting and leading end-to-end security analysis strategies and orchestrating the response to high-complexity cybersecurity incidents and systemic vulnerabilities.
- Distinguished ability to command high-level relationships with a diverse ecosystem of executive and cross-functional stakeholders, serving as a primary Strategic Advisor on enterprise-scale engagements.
- Exceptional track record of driving organizational accountability through visible leadership, including serving as a Lead for global security incidents and a project owner for mission-critical security initiatives.
- A Bachelor’s degree in Computing Engineering, Automation Engineering, or a related technical discipline.
Technical Skills
- Extensive professional tenure with a minimum of 7-10 years of senior-level within the IT Security domain.
- Authoritative knowledge of global manufacturing and automation standards, coupled with deep insights into local industrial systems, is highly regarded.
- Commanding mastery of advanced tools, methodologies, and architectural principles for the analysis of complex requirements, data structures, and systemic processes.
- Expertise in evaluating emerging technology landscapes to engineer and propose strategically aligned, future-proof cybersecurity solutions and defensive controls.
Additional Qualifications
The following advanced competencies are highly valued:
Security Domain Expertise
- Strategic mastery of cybersecurity defense-in-depth principles, including advanced network segmentation, real-time security monitoring, and complex incident response orchestration within OT environments.
- Expertise in deploying enterprise-grade endpoint security and Industrial Intrusion Detection Systems (IIDS), including file integrity monitoring and sophisticated anti-malware protections.
- Authoritative knowledge of industrial risk assessment methodologies and the engineering of robust disaster recovery and forensic investigation frameworks.
Architecture& Infrastructure
- Proven ability to design and vet highly secure, scalable architectures for global networks, industrial systems, and mission-critical applications.
- Advanced command of low-level networking protocols (TCP/IP) and the secure integration of IT/OT infrastructure, including PLC protection and secure remote access.
- Deep institutional knowledge of Roche IT Security Standards and global service deployment models to ensure enterprise-wide harmonization.
Technical Proficiency
- Strategic insight into emerging threat landscapes, including the evolution of hacking techniques and the engineering of proactive defensive controls.
- Proficiency in leveraging automation and scripting (Python, PowerShell, Bash) and core development languages (Java, .Net, C++) to optimize security operations.
Certifications
- Possession of industry-recognized certifications such as CISSP, GICSP, ISA/IEC 62443 Specialist, CEH, or Security+, reflecting a commitment to professional excellence.
- Solid knowledge on IT infrastructure and service deployment model within Roche
- Strong knowledge of the Roche IT Security Standards
We support a flexible work environment with an expectation of working from the office approximately 40% of the time (typically two days per week Office presence required).
Please note that relocation assistance is not provided for this position; candidates must already be authorized to work and live within commuting distance.
Wer wir sind
Eine gesündere Zukunft treibt uns zur Innovation an. Mehr als 100.000 Mitarbeiter weltweit arbeiten gemeinsam daran, wissenschaftliche Fortschritte zu erzielen und sicherzustellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und für zukünftige Generationen. Durch unser Engagement werden über 26 Millionen Menschen mit unseren Medikamenten behandelt und mehr als 30 Milliarden Tests mit unseren Diagnostik-Produkten durchgeführt. Wir ermutigen uns gegenseitig, neue Möglichkeiten zu erkunden, Kreativität zu fördern und hohe Ziele zu setzen, um lebensverändernde Gesundheitslösungen zu liefern.
Gemeinsam können wir eine gesündere Zukunft gestalten.
Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.
