OT Security Product Owner/ Lead

Haleon is a company involved in manufacturing with globally distributed engineering teams focused on Operational Technology (OT) Cyber security. The role supports cyber posture across manufacturing facilities and involves partnership with architecture functions and cyber defence teams.

• 8+ years experience in cybersecurity product management, cloud/data security, or enterprise technology leadership.
• Experience leading delivery of complex, multi-platform security capabilities in large enterprises.
• Technical literacy in Manufacturing Cyber and knowledge of IEC62443 and NIST 800-82 standards.
• Demonstrated experience managing global teams and influencing across organizational boundaries.
• Strong communication, stakeholder management, and executive reporting skills.

Preferred:

• Experience collaborating with architecture teams on multi-year strategy development.
• Experience supporting SOC/IR/DFIR operations with integrated cyber capabilities.
• Background in tool rationalisation, integration strategy, and enterprise-scale security modernisation.
• Professional certifications (preferred, not required).

Strategic Planning & Co-ownership of Roadmaps:

• Be accountable for cyber product controls across Haleon enterprise, engaging manufacturing, quality, supply chain technology, cyber defence, and SOAR teams for integration.
• Own relationships with IT operations, delivery functions, vendors, and suppliers in manufacturing cyber domain.
• Provide regular status and progress reports to Haleon leadership.
• Co-develop a 3-year cyber product capability maturity roadmap with the architecture function.
• Provide subject matter expertise on cybersecurity capabilities, detection and response enablement, and emerging control patterns.
• Ensure strategic alignment across Endpoint, Network, Detection & Response, and manufacturing-specific controls.

Product Ownership & Delivery Leadership:

• Serve as primary owner for execution of all OT cyber security products, capabilities, and enhancements.
• Lead cross-functional delivery teams across engineering, architecture, and operations.
• Own product backlog including intake, refinement, prioritization, sequencing, and communication of delivery outcomes.
• Ensure security capabilities are designed for scalability, operational sustainability, and compliance with standards.

Operational Responsibility:

• Maintain shared responsibility for operational run-state quality, ensuring capabilities are reliable and integrated into workflows.
• Ensure operational readiness before major releases including runbooks, support processes, and monitoring.
• Partner with operations to address post-deployment issues and continuous improvement.

Performance Measurement & Metrics:

• Manage and report on vendor/supplier KPIs.
• Develop and maintain Key Control Indicators (KCIs) and Key Risk Indicators (KRIs) with transparent measurement.
• Track and report posture, control effectiveness, adoption, and operational indicators.
• Present progress updates, dashboards, and risk summaries to Director and VP stakeholders.

Resource & Cost Awareness:

• Provide input into cost forecasting and monitor cost drivers related to cloud, AI, and data security capabilities.
• Maintain accountability for delivering within cost expectations.

Leadership & Talent Development:

• Support Solution Architecture and Cyber Defence resources across matrixed organization.
• Manage and develop 3-5 engineers/SMEs with performance management and succession planning.
• Cultivate a culture of delivery excellence, operational discipline, and continuous improvement.

Stakeholder Engagement:

• Partner with Cyber Defence teams (SOC, IR, Insider Threat, Vulnerability Management, Threat Intelligence, Forensics).
• Collaborate with cloud engineering, data platform, DevOps, and enterprise IT teams to drive adoption and integration.
• Communicate progress, risks, and decisions to Director, VP, and CISO-level stakeholders.

Informujemy, że administratorem danych jest Haleon Poland Sp z o. o.; ul. Wincentego Rzymowskiego 53; 02 -697 Warszawa. Masz prawo do żądania dostępu do swoich danych osobowych, ich sprostowania, usunięcia lub ograniczenia przetwarzania, prawo do wniesienia sprzeciwu wobec przetwarzania, a także prawo do przenoszenia danych oraz wniesienia skargi do organu nadzorczego. Dane osobowe przetwarzane będą w celu realizacji procesu rekrutacji. Podanie danych w zakresie wynikającym z ustawy z dnia 26 czerwca 1974 r. Kodeks pracy jest obowiązkowe. W pozostałym zakresie podanie danych jest dobrowolne. Odmowa podania danych obowiązkowych może skutkować brakiem możliwości przeprowadzenia procesu rekrutacji. Administrator przetwarza dane obowiązkowe na podstawie ciążącego na nim obowiązku prawnego, zaś w zakresie danych dodatkowych podstawą przetwarzania jest zgoda. Dane osobowe będą przetwarzane do czasu zakończenia postępowania rekrutacyjnego i przez okres możliwości dochodzenia ewentualnych roszczeń, a w przypadku wyrażenia zgody na udział w przyszłych postępowaniach rekrutacyjnych - do czasu wycofania tej zgody. Zgoda na przetwarzanie danych osobowych może zostać wycofana w dowolnym momencie. Odbiorcą danych jest serwis Just Join IT oraz inne podmioty, którym powierzyliśmy przetwarzanie danych w związku z rekrutacją.