Principal Automation Engineer (Cybersecurity)

Job description

·  Job facts

Purpose

This role will be the site Single Point of Contact to the Roche/Genentech network and will therefore play a significant part in influencing the development/defining/sustainment of the cyber risk management strategy & security requirements for Roche Singapore Technical Operations (RSTO), as well as, ensuring that all existing and subsequent projects/initiatives meet these requirements. Through the implementation and sustainment efforts the site talent will gain in depth understanding of Roche Global cyber security requirements, design philosophy & guiding principles and further advance them to combat the on-going threats. Specifically, this role is responsible to ensure all Manufacturing systems comply to Roche Global Cyber Security Requirement. Systems are not limited to the following:

·  Process Controls Systems (PCS),
·  Information Management System (IMS),
·  Building Automation Systems (BAS),
·  System used by Quality Control (QC) group for testing purposes as part of Manufacturing Batch release requirement and any other critical systems that are used direct/indirect support to Manufacturing operation.

Critical to success in the role is an employee is to have well established/tested collaboration and communication skills. The individual is expected to work closely with Automation Engineers, RSTO IT, Global IT functions as well as other site functions owning those systems that support Manufacturing operation. Given the criticality to business continuity and the evolving technology, a successful candidate is also expected to maintain a deep & current understanding of global developments & trends in cyber security. As the Subject Matter Expert (SME), the candidate is expected to stimulate thinking and problem solving of site, cross functional and global teams, and is instrumental in enhancing learning and understanding of cyber security threats of RSTO colleagues.

Key Responsibilities

·  Serves as the lead and the RSTO single point of contact for all cybersecurity topics.
·  Build a secure IT/OT solution that will ensure the Roche network and RSTO maintain business continuity while under continuous threat. Required to provide on call cybersecurity support and remediation.
·  Utilize industry standards, monitoring and analysis to support a secure environment for Roche and RSTO manufacturing.
·  Authors and/or owns standards and procedures as necessary for RSTO and for reference by others across the network. Also leverages Global Cybersecurity project standards for planning and execution of the site activities to maintain alignment.
·  Adept at establishing teams and making rapid, independent decisions to enable project execution and maintain momentum.
·  Lead a site team composed of Manufacturing, Automation/Information Technology, Quality, Facilities, and Technology departments to implement projects. This includes establishing the team, proactively monitoring progress/threats, timely escalation, routine communications, etc.
·  Serves as the site representative on the Global Cyber Security Team and other applicable network teams. Actively contributes to both technical and business discussions to ensure site and network security and alignment. Communicates regularly to impacted stakeholders.
·  Responsible for the local activity planning in partnership with the Global Cyber Security team, not limiting to computer patch management, network design review, implementation of monitoring tools to enhance security, site awareness of Cyber Security knowledge/training, etc.
·  Champion the RSTO change management process to ensure program realization.
·  Recruit and manage local contractor/global resources to be in accordance with deliverables and Service Level Agreements, as applicable.
·  Proactively maintain working relationships with Business Process leadership to ensure integration of the System activities (regionally and globally).
·  Lead incident management and engage respective Site Leadership, Cross functional or Global teams to handle the incident accordingly.
·  Provide strategic inputs to the development of tailored security architecture/measures, firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc., for the protection of computer systems, networks & information.
·  Actively lead/perform vulnerability assessments/firewall assessment/penetration testing to maintain business continuity.
·  Accountable for performing routine review and audit of infrastructure security systems to identify opportunity for continuous improvement (e.g. gaps in system architectures). This is inclusive of the OT based infrastructure.
·  Proactively partners with Global/Local Qualification team to define validation testing strategy for Cyber security activities in term of patch management, network implementation, etc.
·  Actively partners with MSAT Automation and other site stakeholders in developing and managing Automation IT upgrade roadmap and activities. This includes assuming responsibility for overflow of automation team activities, as necessary, and providing support for evaluation of new security technologies and controls for OT environment.
·  As applicable, lead and manage technology projects to ensure design comply with Cybersecurity requirements.
·  Adopt Roche's good engineering practice documents when performing the work function.
·  Adhere to the requirements specified in Roche's quality policies/quality standards or related SOP.
·  Comply with all RSTO's Safety, Health & Environmental (SHE) requirements, never put oneself and others at safety & health risks, and report any workplace accidents, near misses and hazards as soon as practicable.
·  Network with peers in the industry, across Roche/Genentech network and within RSTO to keep abreast of developments in the cyber security and related domains.
·  Fosters awareness and understanding of a cybersecurity culture at RSTO.
·  Provide clear written and verbal communication of project goals and accomplishments across stakeholder groups, at various levels of management, across Roche/Genentech.

Qualifications

·  Bachelor, Master, or Doctorate degree is required. A degree in Engineering (ex. Chemical, Electrical, Mechanical, Computer) or equivalent training/experience in automation or IT system is preferred with at least 12 years of related industrial and/or academic experience after receiving Bachelor's degree.
·  Demonstrated work experience specific to automation design, implementation and/ or support of automated control systems.
·  Thorough understanding of Good Automated Manufacturing Practice (GAMP) as it applies to automation design, implementation, and testing.
·  Relevant Knowledge for System / Network Professional Certification – MCSE / CCNA / SQL / VMware / Splunk etc.
·  Security Professional Certification - CompTIA Security+ / CCNA Security / GIAC Security Essentials, etc. are an advantage.
·  Demonstrated experience in leading project teams and partnering with employees, experience leading remote/cross-site teams is a plus. Able to work well with others as a contributing team member.
·  Self-driven, systematic and capable in developing schedule/plan in tracking various Automation/IT cyber security activities.
·  Experience in leading and managing resources in Automation IT activities.
·  Working knowledge of databases, data structures, data access and data transfer packages that are commercially available (e.g., Oracle, MS-SQL, PI, ODBC, JDBC, ESB).
·  Experienced with computer systems used to monitor routine, large-scale pharmaceutical manufacture (e.g., Process Control Systems, Manufacturing Execution Systems, Enterprise Resource Planning Systems, Laboratory Information Management Systems).
·  Strong written and oral communication skills; comfortable presenting to a Senior Management/Executive Level stakeholder.
·  Some international travel will be required.

Appointment to this position will be on local Singapore salary and benefits package.

·  Who we are

At Roche, 94,000 people across 100 countries are pushing back the frontiers of healthcare. Working together, we've become one of the world's leading research-focused healthcare groups. Our success is built on innovation, curiosity and diversity.

Roche is an equal opportunity employer.