IT Security Manager

Overview

As an Information Security Management (ISM) Manager, you will lead the strategy, governance, and operational execution of PECNA’s modern information security program in a 24/7 manufacturing environment. This role is responsible for strengthening enterprise resilience by proactively identifying risk, protecting critical systems and data, and improving the organization’s ability to detect, respond to, and recover from cyber threats. You will partner across Panasonic IT, plant operations, and third‑party providers or customers to embed security into business processes, technology platforms, and digital transformation initiatives.

The ISM Manager will also drive compliance, continuous improvement, and security‑by‑design practices that support reliable operations, regulatory alignment, and long‑term business growth.

• Lead and actively execute day‑to‑day information security operations, ensuring controls, processes, and tools are functioning effectively across the organization.
• Own and administer the ISMS program and related activities to support ISO 27001 compliance, audits, corrective actions, and continuous improvement.
• Conduct comprehensive risk assessments, proactively identify critical control gaps, and collaboratively develop and implement targeted mitigation strategies with cross‑functional IT, OT, business, and plant stakeholders.
• Respond to and manage security incidents directly, including investigation, coordination, containment, root‑cause analysis, and remediation follow‑through.
• Develop, update, and operationalize security policies, standards, procedures, and playbooks to ensure they are practical, current, and aligned to business needs.
• Conduct vulnerability reviews, security assessments, and control validations, and work directly with technical teams to prioritize and track remediation.
• Partner closely with infrastructure, applications, manufacturing operations, and project teams to embed security requirements into new systems, changes, and transformation initiatives.
• Drive alignment of information security practices, standards, and operating processes across multiple PECNA sites to promote consistency, scalability, and effective risk management.
• Mentor and develop a diverse team of security analysts across varying experience levels, providing strategic guidance, performance feedback, workload prioritization, and professional growth opportunities.
• Prepare and deliver security awareness, guidance, and coaching to employees and stakeholders, helping translate policy into practical day‑to‑day behavior.
• Evaluate security technologies, review alerts and reporting, and provide recommendations based on operational needs, risk exposure, and business value.
• Manage and work directly with vendors, service providers, auditors, and internal partners to ensure security requirements are met and issues are resolved in a timely manner.
• Demonstrate flexibility in supporting evolving business priorities, organizational changes, and emerging security risks, adapting responsibilities as needed.

• To ensure the health and safety in the workplace and for the protection of our employees, wearing PPE is a requirement for some roles at PECNA and may include equipment such as a full Tyvek suit, safety shoes, gloves, safety glasses, face mask, bump cap, and a full hazmat suit that includes a respirator.

• Bachelor’s degree in IT Business, Business Administration, Technology Management, or a related degree, and/or equivalent related work experience.

• 5+ years of progressively responsible cybersecurity experience with deep expertise in enterprise security, manufacturing IT security, and industrial control systems (ICS) environments.
• Strong technical, analytical, and problem‑solving skills.
• Excellent written and oral communication skills.
• Customer‑focused and business‑sensitive attitude.
• Experience working in a multicultural environment.
• Proficiency in Cybersecurity Platforms (SIEM, EDR, vulnerability management tools), ISO 27001 certification, and demonstrated experience implementing information security frameworks in complex operational…