Cybersecurity ArchitectSwagelok Company
Job Summary
Swagelok is a global organization and one of the largest employers of manufacturing talent in Northeast Ohio. We are driven by our core values of Quality, Integrity, Respect for the Individual, Customer Focus, Innovation, and Continuous Improvement, which are demonstrated through our daily actions. For over 75 years, our dedication to our core values has been the foundation for our success. Our products have been up into space, down to the bottom of the ocean, and everywhere in between.That same dedication spans to our customers.
Throughout our organization we demonstrate a commitment to these values and those we bring onboard. Whether you want to grow in your role or explore broad opportunities and develop new skillsyoull thrive in a culture that promotes learning and development.
We strive to be a company where we all can do our best work with a true sense of purpose and belonging.
Be Connected. Be Valued. Be You.
We hope youll consider joining our team.
The Cyber Security Architect is responsible for coordinating and architecting information security initiatives across the organization to ensure the availability, integrity, and confidentiality of Swagelok's information technology resources. This role leads security risk assessments, incident response, and the selection of information security technologies, while serving as a subject matter expert and collaborating with various Swagelok business units on security-related matters. The Cyber Security Architect works closely with cross-functional business and IT leaders to achieve business objectives while maintaining a strong security posture.
Essential Duties and Responsibilites:
Designing Secure Systems:Design, build, andoverseesan organization's IT security infrastructure, creating blueprints for robust, layered defenses. Translate security policies into technical, risk-managed designscovering network, cloud, and application securityto protect against internal and external threats. Ensure that all solutions are documented andmaintained.
Developing Security Policies:Define, document, and enforcesecurity policies, procedures,standardsand guidelines that align with business goals and risk tolerance.Translate high-level business requirements into technical, actionable policiessuch as data classification, access control, and incident response plansthat guide the design ofasecure infrastructure.
Security Strategy:Developsand updates thecyber securitystrategyandroadmapsinparthernshipwith the Cyber Security Manager. This willprovide guidance and advocacyregardingprioritization of infrastructure investments to improve Swageloks ITsecurity posture.Maintain professional knowledge through ongoing education and industry engagement.
Risk Assessment & Mitigation:Identifypotential vulnerabilities through security audits,andpenetration testing; analyzing threats to prevent data breaches.Ensure the mitigation of identified risks.Act asprimarypoint of contact during major information security incidents.
Security Tools Implementation:Deploying and managing security technologies such astargeted phishing, business email compromise (BEC),firewalls, intrusion detection systems (IDS/IPS), data loss prevention (DLP), identity management systemsand Security InformationandEvent Management(SIEM).
Strategic Planning:Collaborating with IT teams and stakeholders to align security architecture with businessobjectives, including vendor management and, in some cases, merger/acquisition evaluations.Partner with IT leaders on theprincipalsof Secure by Design to proactivelyapproach tocybersecurity controls and principles into technology products and systems from theinitialdesign phase.
Collaboration and Partnership:Maintaina robust partnership betweena CyberSecurity, Legal counsel,Riskand Data Privacy teams to navigate complex regulatory landscapes, manage risk,protect brand.Monitor and communicate developments in information security legislation relevantto the organization.
Developand Mentor:Cultivate a culture of securityawareness, andarranging continuing education ofassociatesto ensure security policies areadhered to at all times.Alsoexpected to mentor and developassociates in their understanding of securityconcepts,technical.
Education and Work Experience Requirements:
Required:
Education: BA or BS in Computer Science, cybersecurity or a related field preferred, or relavent experience.
10 years of relevant IT experience to include7+years of experience in cybersecurity, especially in a sr. security engineering role.
3+years' experiencewith information systems and computer security-firewalls, encryption, and network architecture acrosscloud,network, and application environments.
2+years' experiencein developing and administering information technology policies; business continuity planning,auditingandriskmanagement .
Knowledge ofDevSecOpsbest practices.
Proficiencyin IoT platforms and/or industrial automation systems.
Experience in Azure(preferred),or similar.
Knowledge of ISO27001 and NIST frameworks.
Knowledge of Zero Trust Architecture principles and best practices.
Experience in managing/ implementingenterprise securityrelatedprojects.
SAP experience helpful, especially using GRC module
Preferred:
CISSP certification, CISA/CISMor GIAC certification.
Skills/Knowledge:
Strong infrastructure management knowledge related to design and implementation of information systems.
Strong written and verbal communication skills.
Knowledge offinancial managementmodels to measure financial return and performance, calculate Return On Investment (ROI), ReturnonAssets (ROA), etc.
Working conditions and/or Physical Requirements:
- Working conditions associated with normal office environment.
- Ability to operate standard office equipment (e.g., computer, telephone, copier, printer, etc.).
- Ability to effectively communicate in both small and large groups and settings.
- Ability to traverse between multiple locations in Ohio and Pennsylvania as needed.
- Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA and other federal, state, and local standards, including meeting qualitative and quantitative productivity standards.
- Ability to maintain regular, punctual attendance consistent with the ADA, FMLA and other federal, state, and local standards.
Swagelok provides a comprehensive package of valuable benefits called Total Rewards focused on health and wellness, compensation, retirement planning, and supplemental rewards.
To apply:
1. Click Apply Now to the role of interest, upload your resume and complete the application.
2. Those that match our qualifications will be contacted to schedule a phone interview.
Congratulations on taking the first step to Be Connected. Be Valued. Be You.
Swagelok is proud to be an Equal Opportunity Employer. Applicants are selected without regard to race, ethnicity, creed, color, religion, sex, pregnancy, pregnancy-related medical conditions, age, national origin or ancestry, disability, genetic information, veteran/military status, sexual orientation, gender identity, or other protected characteristic under federal, state or local law.
Swagelok will make reasonable accommodations in compliance with the Americans with Disabilities Act of 1990, the Americans with Disabilities Act Amendments Act of 2008, and Ohio state law.
This job summary is intended to be brief and does not list all the duties for this position. Nothing in this job description should be construed as an express or implied contract of employment. Swagelok is an at-will employer, which means that either party is free to terminate the employment relationship at any time, without any advanced notice, for any reason or no reason.
#LI-LK1
#LI-Hybrid