Sr Manager Tech Consumer Risk & Assurance

Senior Manager Tech Consumer Risk & Assurance US – Tampa, FL

At PMI U.S., we are building a modern nicotine business—focused on helping make a future without cigarettes a reality in America. As the U.S. businesses of Philip Morris International, we are investing in new products, science, and capabilities to provide the approximately 25 million legal age adults who still smoke with better alternatives.

Our approach is rooted in innovation, responsible marketing, and a growing U.S. footprint that spans manufacturing, technology, and commercial operations across the country.

That creates real opportunity. You'll have the space to take ownership, develop new ideas, and contribute to work that is shaping our business and the category. We're looking for people who are curious, collaborative, and motivated by progress—because the scale of what we're building creates room to grow in different directions.

The role combines strategic leadership, governance oversight and hands-on engagement across Asset Assurance, IT Resilience, Security Operations and Security Engineering. It partners closely with service managers, product group/teams, engineering, architecture, and information security (Info Sec) to strengthen security posture, improve operational resilience, assure technology asset governance and enhance security operations capability across the technology lifecycle.

The role is also expected to champion practical AI-enabled cybersecurity use cases, ensuring AI, automation and analytics are used responsibly to improve threat detection, vulnerability prioritization, risk insights, incident readiness, control monitoring and security reporting while maintaining human oversight, data protection and policy alignment.

• Senior experience in technology security, cybersecurity, IT risk, controls assurance, platform security, resilience, or related disciplines within complex enterprise environments.
• Strong knowledge of modern technology ecosystems, including cloud, SaaS, IaaS, PaaS, APIs, microservices, CI/CD, application security, and operational support models.
• Proven ability to integrate security, risk, and control requirements into Agile, Dev Ops, platform operations, and service management practices.
• Experience with asset governance, technology inventories, service ownership, configuration management, and technology lifecycle risk management.
• Expertise in disaster recovery, business continuity, resilience testing, recovery planning, supplier resilience assessments, and remediation management.
• Experience in security operations, incident response, vulnerability management, security monitoring, operational playbooks, and reporting.
• Strong understanding of secure engineering, threat modeling, Dev Sec Ops , security testing, cloud security, and platform hardening.
• Practical knowledge of AI, machine learning, and generative AI applications in cybersecurity, including threat intelligence, anomaly detection, phishing and malware triage, vulnerability prioritization, SOC automation, and risk reporting.
• Ability to assess AI-enabled security tools and use cases, including benefits, limitations, data requirements, control considerations, and human oversight needs.
• Awareness of AI-related security risks, including prompt injection, data leakage, model misuse, adversarial attacks, insecure integrations, and sensitive data exposure.
• Ability to translate complex security, resilience, asset, AI, and risk data into clear, actionable insights for senior stakeholders.
• Excellent consulting, influencing, facilitation, and executive communication skills, with a pragmatic, risk-based approach.
• Ability to navigate ambiguity, manage competing priorities, and balance strategic leadership with hands-on execution.

• Senior experience in cybersecurity, technology risk, controls, resilience, security operations, or platform security within complex enterprise environments.
• Strong understanding of modern technology platforms, including cloud, SaaS, APIs, microservices, CI/CD, and application security.
• Proven ability to embed security, risk, and controls into Agile, Dev Ops, platform operations, and service…