Senior Manager - Cybersecurity OT Manufacturing & Distribution
Boston · Irvine · Full time · Posted 1MO AGO
Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact.
A Day in the LifeAt Medtronic, we bring bold ideas forward with speed and decisiveness to put patients first in everything we do. In-person exchanges are invaluable to our work. We're working onsite 4 days a week as part of our commitment to fostering a culture of professional growth and cross-functional collaboration as we work together to engineer the extraordinary.The preferred working location for this role is the Medtronic facility located in Mounds View, Minnesota; however, the individual may also work onsite at another US-based Medtronic facility.
• Mounds View, Minnesota
• Boston, Massachusetts
• Lafayette, Colorado
• Irvine, California (UCI)
• Jacksonville, Florida
• Fort Worth, Texas
• Memphis, Tennessee
• North Haven, Connecticut
In this pivotal role as Sr. Manager – Cybersecurity OT Manufacturing & Distribution, you will lead the operational technology (OT) cybersecurity strategy and execution for Medtronic manufacturing and distribution environments. This leader is accountable for translating enterprise cybersecurity objectives into operational plans, standards, and business outcomes across multiple job areas, while protecting critical manufacturing operations, distribution capabilities, and patient-impacting processes.
This role requires broad management and leadership capability, deep functional and operational expertise in OT cybersecurity, and mastery within a technical discipline with broad understanding of adjacent areas including engineering, manufacturing operations, infrastructure, network security, incident response, risk management, and regulatory compliance. The Sr. Manager must influence across functions, drive alignment among stakeholders with differing priorities, and lead teams through complex, ambiguous, and high-impact operational security challenges.
We seek leaders with a clear vision, bold and inclusive thinkers who can generate innovative ideas and drive our best solutions forward, benefiting our patients, business partners, and customers.
Anchored in our Mission, we continue to drive ID&E forward both to enhance the well-being of Medtronic employees and to accelerate innovation that brings our lifesaving technologies to more people in more places around the world.
Bring your talents to an industry leader in medical technology and healthcare solutions – we’re a market leader and growing every day. You can be proud to be a part of technologies that are rooted in our long history of mission-driven innovation. You will be empowered to shape your own career. We encourage and support your growth with the training, mentorship, and guidance you need to own your future success. Together, we can transform healthcare. Join us for a career in IT that changes lives. Medtronic is committed to fostering a diverse and inclusive culture. Check out the accomplishments of our Women in IT group! http://bit.ly/MedtronicWomeninIT.
CAREERS THAT CHANGE LIVES
The Senior Manager – Cybersecurity OT (Operational Technology) Manufacturing & Distribution leads the development and execution of the OT cybersecurity strategy for a department or business area, ensuring alignment to Medtronic’s enterprise objectives and the resiliency of manufacturing and distribution operations. This leader manages experienced professionals and/or people or program leaders, provides thought and technical leadership, recommends goals and plans for the function, and makes decisions that affect operational priorities, resources, budgets, and delivery outcomes.
This role operates with a high degree of autonomy and is expected to solve complex, difficult, and often undefined problems through investigation, analysis, and collaboration. The Sr. Manager establishes new objectives, policies, standards, and operating processes that strengthen OT security, improve consistency across sites, and enable secure business growth. The role regularly influences leaders across engineering, operations, quality, supply chain, enterprise IT, and cybersecurity, and communicates operational and strategic updates to senior leadership.
Responsibilities include:
Strategic Leadership and Planning:
Lead the development, communication, and execution of the OT cybersecurity strategy for manufacturing and distribution environments, ensuring linkage to Medtronic’s enterprise strategy, business objectives, and risk priorities.
Translate strategy into operational plans, roadmaps, standards, and measurable business outcomes across multiple OT security job areas and site operations.
Recommend strategies, goals, priorities, and resource plans for the OT cybersecurity function, balancing business continuity, resilience, compliance, and risk reduction.
Partner with senior leaders across manufacturing, engineering, quality, supply chain, and enterprise cybersecurity to integrate OT security into business and operational decisions.
Leadership and Talent Management:
Lead, coach, and develop experienced professionals, site security champions, and/or people or program leaders; set clear performance expectations and build organizational capability.
Drive talent planning, succession, engagement, performance management, and professional development for the OT cybersecurity team.
Authorize and support hiring, promotion, reward, and other people decisions within the function, consistent with business needs and Medtronic policies.
Risk Management and Security Governance:
Direct OT risk assessments, threat modeling, and vulnerability analysis for manufacturing and distribution environments, including identification of complex or systemic risk patterns.
Establish, implement, and continuously improve OT cybersecurity policies, standards, controls, and governance mechanisms aligned to business needs and industry expectations.
Initiate programs and projects based on identified business, operational, and tactical needs to improve cyber resilience, consistency, and compliance across sites.
Security Architecture, Operations, and Innovation:
Provide technical leadership for secure OT architecture, network segmentation, remote access, asset protection, monitoring, and secure integration between IT and OT environments.
Evaluate, prioritize, and drive adoption of security technologies, operational capabilities, and process improvements that significantly improve OT security effectiveness and scalability.
Develop new objectives, operating procedures, standards, and cross-site practices that address complex, undefined security challenges and enable knowledge sharing and best practices across the business area.
Incident Response and Resilience:
Lead OT cyber incident readiness and response, including investigation, containment, eradication, recovery, lessons learned, and executive communications.
Coordinate with enterprise cyber defense, manufacturing operations, site leadership, legal, quality, and other partners during significant incidents or operational disruptions.
Ensure incident response plans, playbooks, and recovery strategies are maintained, tested, and continuously improved for critical OT processes.
Compliance, Communication, and Stakeholder Influence:
Ensure OT environments comply with applicable internal policies, regulatory requirements, and industry standards such as NIST 800-82, IEC 62443, and other relevant frameworks.
Influence across functions and businesses while balancing divergent objectives to gain cooperation on operational priorities, program execution, and security decisions.
Develop long-term strategic relationships with key internal and external stakeholders, vendors, and partners to strengthen OT cybersecurity outcomes.
Communicate and present OT security risks, strategy, program health, and business impacts to technical teams, business leaders, and senior leadership.
Financial and Operational Accountability:
Manage the OT cybersecurity budget and resource plans for the function, including prioritization of expenditures, vendor services, and technology investments.
Make decisions that affect project and operational deadlines, resources, funds, and the achievement of organizational objectives.
Drive continuous improvement in operational delivery, control effectiveness, and consistency of outcomes across manufacturing and distribution environments.
MUST HAVE (Minimum Qualifications)
7+ years of experience with a bachelor’s degree or 5+ years of experience with an advanced degree
5+ years of managerial experience
NICE TO HAVE (Preferred Qualifications)
Minimum of 10 years of relevant cybersecurity experience with a bachelor’s degree, or 8 years of relevant experience with an advanced degree.
Minimum of 7+ years of managerial experience leading teams of experienced professionals and/or people or program leaders
Previous Medtronic experience.
Experience leading cybersecurity programs in ICS, OT, manufacturing, and/or distribution environments.
Demonstrated success developing department or business-area strategies and translating them into roadmaps, standards, business plans, and measurable outcomes.
Experience leading cross-functional programs involving engineering, operations, quality, supply chain, enterprise IT, and cybersecurity stakeholders.
Demonstrated ability to solve complex, difficult, and undefined problems using data gathering, analysis, investigation, and structured decision-making.
Experience influencing across functions and businesses, balancing divergent objectives, and briefing senior or executive leadership on operational and strategic initiatives.
Experience managing budgets, resource plans, vendors, and external partners in support of OT cybersecurity objectives.
Relevant certifications such as CISSP, CISM, CISA, GICSP, GRID, or equivalent.
Skills:
Knowledge of OT security frameworks, standards, and regulations including NIST 800-82, IEC 62443, ISA/IEC concepts, and applicable manufacturing control expectations.
Strong technical leadership, people leadership, communication, stakeholder management, and program execution skills.
Ability to establish new objectives, operating policies, standards, and processes that improve security and operational resilience.
Ability to drive innovation, best-practice adoption, and knowledge sharing across a business area.
For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.
Physical Job Requirements
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.
The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer, and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role.
U.S. Work Authorization & Sponsorship
At Medtronic, we are committed to fostering an environment where employees can thrive and make a meaningful impact. In alignment with our enterprise-wide workforce planning approach, U.S. work authorization sponsorship (H-1B, TN, J, etc.) is offered exclusively for Principal-level roles and above, where specialized expertise aligns with long-term business needs. Roles below the Principal level require candidates to possess unrestricted U.S. work authorization at the time of hire and for the duration of employment.
Recruitment Fraud Alert
We are aware of phishing scams targeting job seekers. Please keep the following in mind:
Apply only through official Medtronic channels. All legitimate Medtronic recruiting communications come from approved Medtronic platforms and official @medtronic.com email addresses.
Medtronic will never ask for payment or sensitive personal information (such as bank account or Social Security details) during early stages of the hiring process. Any such requests are not legitimate.
If you receive a suspicious message claiming to be from Medtronic, do not respond, click links, or open attachments.
If you have any questions, concerns regarding the authenticity of a communication alleged to have been made by or on behalf of Medtronic, please contact us immediately at AskHR@medtronic.com.
Benefits & CompensationMedtronic offers a competitive Salary and flexible Benefits Package
A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.
This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location. Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others).
The following benefits and additional compensation are available to those regular employees who work 20+ hours per week: Health, Dental and vision insurance, Health Savings Account, Healthcare Flexible Spending Account, Life insurance, Long-term disability leave, Dependent daycare spending account, Tuition assistance/reimbursement, and Simple Steps (global well-being program).
The following benefits and additional compensation are available to all regular employees: Incentive plans, 401(k) plan plus employer contribution and match, Short-term disability, Paid time off, Paid holidays, Employee Stock Purchase Plan, Employee Assistance Program, Non-qualified Retirement Plan Supplement (subject to IRS earning minimums), and Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums).
Regular employees are those who are not temporary, such as interns. Temporary employees are eligible for paid sick time, as required under applicable state law, and the Employee Stock Purchase Plan. Please note some of the above benefits may not apply to workers in Puerto Rico.
Further details are available at the link below:
Medtronic benefits and compensation plans
It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.
If you are applying to perform work for Medtronic, Inc. (“Medtronic”) in any position which will involve performing at least two (2) hours of work on average each week within the unincorporated areas of Los Angeles County, you can find here a list of all material job duties of the specific job position which Medtronic reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. Medtronic will consider for employment qualified job applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
