Cyber Security Architecture Senior Manager

Where passion meets opportunity

The best of your adventures is the one you have yet to sail!

Your Purpose

We are looking for a Senior Manager to lead our Cyber Security Architecture function across Information Technology (IT) and Operational Technology (OT).

In this role you will shape how security is designed, integrated and governed across MSC Cruises’ shoreside and onboard technology landscape — from cloud, applications and enterprise infrastructure to shipboard networks, computer-based systems and operational environments.

You will set the technical direction and partner with IT, Digital, Fleet, Marine and Engine, Newbuild and business stakeholders to protect safety, operational continuity and cyber resilience.

• Your Impact
• Lead the IT/OT security architecture strategy, standards and reference architectures across cloud, applications, networks, shipboard systems and operational environments.
• Embed security-by-design across technology projects and IT/OT system lifecycles, providing architecture guidance and assurance to IT, Digital, Fleet, Newbuild and Engineering teams.
• Drive “Enterprise Architecture as Code” on Git Lab, managing reference architectures, policy-as-code, ADRs and diagrams through merge requests and CI/CD automation.
• Improve cloud, enterprise and IT/OT security through baselines, guardrails, secure configuration standards and continuous improvement.
• Leadership & Governance
• Lead, grow and mentor a team of IT/OT security architects and OT security specialists.

Set the technical roadmap, define KPIs and metrics, and report on security posture and progress to the CISO and senior stakeholders.

• Align IT/OT architecture and security activities with relevant frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST SP 800-82, ISA/IEC 62443, IACS UR E26/E27, IMO maritime cyber-risk guidance and applicable data-protection requirements.
• Act as a trusted advisor across IT, Digital, Fleet, Marine and Engine, Newbuild and the business, balancing cyber risk with safety, reliability, availability and operational objectives.
• Ensure the definition and implementation of Cyber Security Architecture budget, including annual planning, forecasting, vendor negotiation and cost optimization across IT/OT security initiatives; provide regular budget reporting and variance analysis to the CISO and Finance.
• Your Journey so far
• 8+ years of cybersecurity experience, including 5+ years leading or managing teams.
• Strong security architecture background across applications, cloud (Azure), networks and enterprise systems, with practical exposure to OT environments.
• Strong application security architecture expertise, including secure-by-design principles, threat modelling, secure SDLC, API security, identity and access controls, and cloud-native applications.
• Strong knowledge of OT security fundamentals, including network segmentation, zones and conduits, secure remote access and system hardening.
• Experience with Git/Git Lab, CI/CD, Infrastructure as Code and policy-as-code.
• Knowledge of relevant frameworks and methods, including OWASP, NIST SSDF, Zero Trust, NIST CSF and ISA/IEC 62443.
• Proven ability to lead teams, influence stakeholders and communicate complex topics to technical and non-technical audiences.
• Fluent English; Italian is a strong plus.
• Demonstrated track record of managing a high volume of concurrent engagements, with an average of 50 projects per year; ability to prioritize, delegate and govern multiple workstreams simultaneously without compromising quality or timelines.
• Experience in a large maritime, transportation, manufacturing, energy or other safety- and availability-critical environments are particularly relevant.
• Experience managing shipyards, ship classification societies, equipment manufacturers, system integrators, managed security providers or other OT security partners.
• Preferred Certifications
• CISSP, CSK, CSSLP, CCSP or equivalent.
• Microsoft Certified: Cybersecurity Architect Expert (SC-100).
• ISA/IEC 62443 Cybersecurity Expert or Specialist, and/or Global Industrial Cyber Security Professional (GICSP).
• CCSP or Azure security certifications (e. g. AZ-500), and OT-focused certifications, are a plus
• Your Essentials
• In-depth knowledge of security standards and frameworks.

Hands-on experience with security tools and technologies including firewalls.

Strong communication skills with the ability to convey complex technical concepts to technical and non-technical stakeholders.

Professional certifications are strongly preferred.

• Fluency in English is mandatory and Italian is a strong plus.
• Ability to manage multiple priorities and deliver results in a fast-paced dynamic environment.
• EU passport or the right to work in Switzerland.
• Our commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves.

Our commitment extends to taking meaningful, measurable actions that have a long-term positive impact on our guests, our employees and our planet.

#J-18808-Ljbffr