Manufacturing Cyber Security Architect

About the role

Roche is looking for a Manufacturing Cyber Security Architect in Madrid to lead its digital transformation within Pharma Technical Operations. As the main link between global Technical Operations and Cyber Security teams and local manufacturing engineering, you will architect the future manufacturing network, ensure compliance, run security design reviews and assess maturity, and bridge global enterprise initiatives with local site realities.

Key responsibilities

• Act as the primary cyber security and digital liaison between manufacturing site operations and global PTE teams.
• Design and advise on technologies such as IIoT, Open Source, Unified Namespace (UNS), Asset Administration Shell (AAS) and cloud-based manufacturing systems.
• Ensure site adherence to corporate cyber security standards, policies, risk frameworks and regulatory requirements.
• Support implementation and continuous monitoring of cyber security controls across manufacturing equipment, automation systems and digital infrastructure.
• Adapt global PT and IT cyber security strategies to the local site's operational reality.
• Facilitate communication, training and capability building on cyber security for cross-functional site teams.
• Coordinate site-level incident responses and escalate to global teams when needed.
• Partner with IT, Engineering, Quality and Manufacturing teams to embed security in initiatives such as Industry 4.0, IoT and MES.

Required profile

• Bachelor's degree in Engineering, Computer Science, Cyber Security or a related field (Master's preferred), or equivalent practical experience.
• Proven experience (typically 3-5+ years) in pharmaceutical, biotech or regulated manufacturing environments.
• Deep understanding of cyber security frameworks, compliance standards, GxP regulations, the Purdue Model and OT architectural design.
• Working knowledge of manufacturing systems and digital technologies such as SCADA, DCS, MES and IIoT.
• Experience in risk assessment, KPI governance, audit preparation and technical documentation.
• Certifications such as CISSP, CISM, ISA/IEC 62443, GICSP or SANS ICS are a strong asset.