Cyber Security Architecture Senior Manager

Where passion meets opportunity

The best of your adventures is the one you have yet to sail!

We are looking for a Senior Manager to lead our Cyber Security Architecture function across Information Technology (IT) and Operational Technology (OT). In this role you will shape how security is designed, integrated and governed across MSC Cruises’ shoreside and onboard technology landscape — from cloud, applications and enterprise infrastructure to shipboard networks, computer-based systems and operational environments. You will set the technical direction and partner with IT, Digital, Fleet, Marine and Engine, Newbuild and business stakeholders to protect safety, operational continuity and cyber resilience.

• Lead the IT/OT security architecture strategy, standards and reference architectures across cloud, applications, networks, shipboard systems and operational environments.
• Embed security-by-design across technology projects and IT/OT system life cycles, providing architecture guidance and assurance to IT, Digital, Fleet, Newbuild and Engineering teams.
• Drive “Enterprise Architecture as Code” on Git Lab, managing reference architectures, policy-as-code, ADRs and diagrams through merge requests and CI/CD automation.
• Improve cloud, enterprise and IT/OT security through baselines, guardrails, secure configuration standards and continuous improvement.

• Lead, grow and mentor a team of IT/OT security architects and OT security specialists. Set the technical roadmap, define KPIs and metrics, and report on security posture and progress to the CISO and senior stakeholders.
• Align IT/OT architecture and security activities with relevant frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST SP 800-82, ISA/IEC 62443, IACS UR E26/E27, IMO maritime cyber-risk guidance and applicable data-protection requirements.
• Act as a trusted advisor across IT, Digital, Fleet, Marine and Engine, Newbuild and the business, balancing cyber risk with safety, reliability, availability and operational objectives.
• Ensure the definition and implementation of Cyber Security Architecture budget, including annual planning, forecasting, vendor negotiation and cost optimization across IT/OT security initiatives; provide regular budget reporting and variance analysis to the CISO and Finance.

• 8+ years of cybersecurity experience, including 5+ years leading or managing teams.
• Strong security architecture background across applications, cloud (Azure), networks and enterprise systems, with practical exposure to OT environments.
• Strong application security architecture expertise, including secure-by-design principles, threat modelling, secure SDLC, API security, identity and access controls, and cloud-native applications.
• Strong knowledge of OT security fundamentals, including network segmentation, zones and conduits, secure remote access and system hardening.
• Experience with Git/Git Lab, CI/CD, Infrastructure as Code and policy-as-code.
• Knowledge of relevant frameworks and methods, including OWASP, NIST SSDF, Zero Trust, NIST CSF and ISA/IEC 62443.
• Proven ability to lead teams, influence stakeholders and communicate complex topics to technical and non-technical audiences.
• Fluent English;
  Italian is a strong plus.
• Demonstrated track record of managing a high volume of concurrent engagements, with an average of 50 projects per year; ability to prioritize, delegate and govern multiple work streams simultaneously without compromising quality or timelines.
• Experience in a large maritime, transportation, manufacturing, energy or other safety- and availability-critical environments are particularly relevant.
• Experience managing shipyards, ship classification societies, equipment manufacturers, system integrators, managed security providers or other OT security partners.

• CISSP, CSK, CSSLP, CCSP or equivalent.
• Microsoft Certified:
  Cybersecurity Architect Expert (SC-100).
• ISA/IEC 62443 Cybersecurity Expert or Specialist, and/or Global Industrial Cyber Security Professional (GICSP).
• CCSP or Azure security certifications (e.g. AZ-500), and OT-focused certifications,…