Sr Staff Program Manager, Information Security (Longmont, CO, US)

About our group:

The Information Security organization is responsible for protecting Seagate's global technology environment and enabling secure, resilient business operations. Within Information Security, the OT Security pillar focuses on securing factory and engineering environments by advancing OT security strategy, standards, risk visibility, architecture coordination, detection readiness, and engagement with plant and engineering leadership.

The team works across Information Security, IT, manufacturing, engineering, site operations, infrastructure, vendors, and managed service providers to improve the security and resilience of factory environments while supporting operational continuity and production priorities.

About the role - you will:

The Program Manager, Information Security supports the planning, governance, coordination, and reporting discipline for Seagate’s OT Security portfolio. This is an OT Security program management role, not a hands-on OT engineering or architecture role. The role helps translate OT Security priorities into structured execution plans across factory and engineering environments, including OT asset visibility, segmentation, secure remote access, vulnerability remediation, monitoring readiness, incident preparedness, and site-level risk reduction.

This role requires strong program management experience in cybersecurity, infrastructure, manufacturing technology, operational technology, or a related technical environment. The ideal candidate does not need to be the primary OT architect or hands-on factory security engineer, but must be able to coordinate technical and operational stakeholders, understand factory dependencies and production constraints, track risks and remediation, and communicate progress and decisions clearly.

• Manage OT Security initiatives from planning through execution, ensuring clear scope, ownership, milestones, dependencies, risks, and measurable outcomes.
• Maintain the OT Security roadmap across factory and engineering environments, including asset visibility, segmentation, secure remote access, monitoring, vulnerability management, incident readiness, and remediation activities.
• Coordinate execution across Information Security, IT, manufacturing, engineering, site operations, vendors, and managed service providers.
• Establish a consistent operating cadence with site leaders, engineering stakeholders, factory technology owners, and security teams.
• Track site-level commitments, remediation actions, risk acceptance items, leadership decisions, and barriers to execution.
• Develop and maintain OT Security dashboards, KPIs, KRIs, project health indicators, RAID logs, decision logs, and remediation tracking.
• Provide visibility into factory security posture, priority risks, aging issues, dependencies, and decisions required for leadership review.
• Coordinate with Architecture & Engineering on IT/OT boundary design, segmentation planning, firewall governance, secure remote access, monitoring platforms, and reference-architecture adoption.
• Coordinate with Security Operations on OT detection use cases, alert handling, incident playbooks, tabletop exercises, and response readiness.
• Drive continuous improvement in OT Security program governance, reporting, operating cadence, and automation to improve execution discipline and reduce administrative overhead.
• This is an individual contributor role and does not have people management responsibilities.

About you:

The right individual for this role is organized, analytical, and execution-oriented, with the ability to bring structure to complex OT security initiatives across global factory and engineering environments. You are comfortable working with security, IT, manufacturing, engineering, and site operations teams, and can balance risk reduction with operational continuity and production realities without needing to be the technical owner for every control.

• You understand that factory security must be practical, risk-based, and aligned with operational uptime.
• You can drive accountability across global sites and technical teams without direct authority.
• You are comfortable turning fragmented site, asset, risk, and project data into actionable plans and leadership reporting.
• You communicate clearly with both technical teams and operational leaders, challenge assumptions constructively, and surface risks or decisions early.

Responsibilities:

The activities covered by the Program Manager can be grouped into the following OT Security areas:

OT Security Program Execution:

• Maintain the integrated OT Security portfolio, roadmap, delivery plans, intake process, and governance calendar.
• Translate OT Security priorities into practical program plans across asset visibility, segmentation, secure remote access, monitoring readiness, vulnerability remediation, and incident preparedness.
• Define and apply consistent methods for status reporting, risk and issue management, RAID tracking, dependency tracking, change control, decision logging, and action-item follow-up.
• Track commitments and milestones across factory security initiatives and ensure owners provide timely updates and corrective actions where required.

Factory Engagement, Metrics, and Risk Visibility:

• Coordinate the collection, validation, and presentation of OT security program metrics, KPIs, KRIs, and delivery performance indicators.
• Create and improve dashboards that provide actionable visibility into factory security posture, remediation progress, priority risks, aging issues, control implementation, and delivery performance.
• Work with factory, engineering, IT, and security leaders to improve metric definitions, data quality, reporting cadence, and accountability for OT risk reduction.

IT/OT Coordination and Leadership Reporting:

• Prepare clear and concise materials for Information Security leadership, manufacturing and engineering leaders, the CIO, and other leadership forums.
• Synthesize complex site, project, risk, and performance information into leadership-level views of accomplishments, trends, constraints, trade-offs, and decisions required.
• Maintain an operating rhythm that connects OT Security strategy, factory execution, metrics, risk visibility, and leadership decisions.

Your experience includes:

• 5+ years of experience in program management, project management, PMO, portfolio management, or a related role within cybersecurity, infrastructure, manufacturing technology, operational technology, or a closely related technical environment.
• Experience managing multiple concurrent projects through initiation, planning, execution, monitoring and controlling, and closure.
• Demonstrated experience establishing project governance, tracking dependencies and risks, and driving cross-functional execution without direct authority.
• Experience developing KPIs, KRIs, dashboards, status reporting, project health views, and executive-level presentations or management reporting.
• Familiarity with OT/ICS environments, factory networks, engineering systems, manufacturing operations, or similar environments; hands-on OT engineering experience is not required.
• Experience coordinating programs or workstreams involving segmentation, firewalls, secure remote access, asset visibility, vulnerability remediation, monitoring readiness, or incident preparedness.
• Strong analytical skills with the ability to identify trends, inconsistencies, delivery risks, and opportunities for improvement.
• Strong written and verbal communication skills, including the ability to translate detailed technical, site, risk, or project information into concise leadership-level messages.
• Experience working with globally distributed manufacturing sites, plant stakeholders, engineering teams, IT, and security teams across multiple functions and time zones.

Preferred Qualifications:

• Bachelor's Degree in Cybersecurity, Information Technology, Engineering, Business, Project Management, or a related field and 12+ years of experience, or Master’s degree in Cybersecurity, Information Technology, Engineering, Business, Project Management and 8+ years of experience, or PHD and 5+ years of experience or equivalent education and experience.
• Familiarity with OT/ICS security frameworks and practices, such as NIST CSF, NIST SP 800-82, ISA/IEC 62443, or similar guidance.
• Exposure to OT asset discovery, passive monitoring, network segmentation, firewall governance, secure remote access, vulnerability management, or OT incident response programs.
• Experience in manufacturing, factory operations, engineering labs, industrial environments, or global site-based technology programs.
• Experience with security, infrastructure, project, reporting, and collaboration tools such as FreshService, Jira, Confluence, Power BI, SharePoint, Excel, PowerPoint, or similar platforms.
• PMP, PgMP, PRINCE2, CISSP, CISM, GICSP, or similar certification preferred but not required.

The estimated base salary range for this position is $132,974.00 - $193,816.00. The individual salary is based on work location and additional factors, including job-related skills, experience, and relevant education or training.

Seagate offers comprehensive benefits to its eligible employees, including, but not limited to, eligibility to participate in a discretionary bonus program, medical, dental, vision, and life insurance, short- and long-term disability, 401(k), employee stock purchase plan, health savings account, dependent care, and healthcare spending accounts. Seagate also offers paid time off, including 12 holidays, flexible time off provided pursuant to Seagate policy, a minimum of 48 hours of paid sick leave, and 16 weeks of paid parental leave. The benefits for this position are based on a full-time schedule for a full calendar year and may differ depending on work location.

Location:

This position is based onsite in Longmont, CO for candidates within the local commuting radius. Candidates outside that radius may be considered for remote work within the United States.

Our Longmont product-design campus is nestled against the foothills with exceptional views of the Rocky Mountains. Here at work, you can grab breakfast and lunch in the on-site cafeteria or get an afternoon espresso, prepared by a professional barista. Our 600+ employees enjoy an active on-site experience from sporting activities (get in a few laps at lunch on our 1-mile walking path around campus, play ping-pong or volleyball, or stop in our 24-hour fitness center for a group or individual workout). We also offer opportunities for community service and participation in various employee resource groups.

Seagate is able to offer virtual employment for this position in the following states: AL, AZ, CO, CT, FL, GA, ID, IL, IN, KS, KY, MA, MD, MI, MN, MO, NC, NH, NJ, NM, NY, NV, OH, OK, OR, PA, SC, SD, TN, TX, UT, VA, WA, WI, WY.​ 

Location: Longmont, United States
Travel: Up to 10%