Business Risk Manager Jobs in Reno, NV (NOW HIRING)

As an Information Security Management (ISM) Manager, you will lead the strategy, governance, and operational execution of PECNA’s modern information security program in a 24/7 manufacturing environment. This role is responsible for strengthening enterprise resilience by proactively identifying risk, protecting critical systems and data, and improving the organization’s ability to detect, respond to, and recover from cyber threats. You will partner across Panasonic IT, plant operations, and third‑party providers or customers to embed security into business processes, technology platforms, and digital transformation initiatives. The ISM Manager will also drive compliance, continuous improvement, and security‑by‑design practices that support reliable operations, regulatory alignment, and long‑term business growth.

• Lead and actively execute day‑to‑day information security operations, ensuring controls, processes, and tools are functioning effectively across the organization.
• Own and administer the ISMS program and related activities to support ISO 27001 compliance, audits, corrective actions, and continuous improvement.
• Conduct comprehensive risk assessments, proactively identify critical control gaps, and collaboratively develop and implement targeted mitigation strategies with cross‑functional IT, OT, business, and plant stakeholders.
• Respond to and manage security incidents directly, including investigation, coordination, containment, root cause analysis, and follow‑through on remediation actions.
• Develop, update, and operationalize security policies, standards, procedures, and playbooks to ensure they are practical, current, and aligned to business needs.
• Conduct vulnerability reviews, security assessments, and control validations, and work directly with technical teams to prioritize and track remediation.
• Partner closely with infrastructure, applications, manufacturing operations, and project teams to embed security requirements into new systems, changes, and transformation initiatives.
• Drive alignment of information security practices, standards, and operating processes across multiple PECNA sites to promote consistency, scalability, and effective risk management across the enterprise.
• Mentor and develop a diverse team of security analysts across varying experience levels, providing strategic day‑to‑day guidance, constructive performance feedback, intelligent workload prioritization, and personalized professional growth opportunities to cultivate a highly resilient and adaptive security team.
• Prepare and deliver security awareness, guidance, and coaching to employees and stakeholders, helping translate policy into practical day‑to‑day behavior.
• Evaluate security technologies, review alerts and reporting, and provide recommendations based on operational needs, risk exposure, and business value.
• Manage and work directly with vendors, service providers, auditors, and internal partners to ensure security requirements are met and issues are resolved in a timely manner.
• Demonstrate flexibility in supporting evolving business priorities, organizational changes, and emerging security risks, adapting responsibilities and ways of working as needed to meet changing business and operational needs.

Education: Bachelor’s degree in IT Business, Business Administration, Technology Management, or a related degree, and/or equivalent related work experience.

Essential Qualifications:

• 5+ years of progressively responsible cybersecurity experience with deep expertise in enterprise security, manufacturing IT security, and industrial control systems (ICS) environments.
• Strong technical, analytical, and problem‑solving skills.
• Excellent written and oral communication skills.
• Customer‑focused and business‑sensitive attitude.
• Experience working in a multicultural environment.
• Proficiency in Cybersecurity Platforms (SIEM, EDR, vulnerability management tools), ISO 27001 certification, and demonstrated experience implementing information security frameworks in complex operational environments.

Preferred Qualifications:

• Possess comprehensive security knowledge/expertise with proven experience in security operations, incident response, risk management, and leadership skills to build, mentor, and retain high‑performing security teams in dynamic manufacturing technology environments.
• Minimum of 5 years proven experience and demonstrated success in technology program management with emphasis on security operations, incident response, vulnerability management, and information security.
• Minimum of 3 years of demonstrated experience building and managing vulnerability management programs from vulnerability discovery processes to prioritization, remediation, and validation.
• Proven ability to make decisions and perform complex problem‑solving activities under pressure.
• Sharp analytical abilities and the ability to make sound decisions quickly.
• Understanding of SIEM ecosystem, solutions, and architecture.
• Understanding of EDR vendors, solutions, and architecture.
• Mobilize and energize large, complex cross‑functional teams to drive down vulnerability risk.
• Understanding of security standard and regulatory compliance such as NIST, SOX, PCI, CMMC and their differentiators across global regions.
• Understanding of Security Orchestration, Automation and Response concepts, and experience working with ticketing and knowledge management systems, security analytics platforms, and reporting platforms. Also, ability to translate technical findings and articulate recommendations for non‑technical stakeholders.

Preferred Certifications:

• CISSP, CCSP, CRISC, CISM, GSLC, GCED, GDSA, GDAT, CMMI, PMP, ITIL.

Required Lifting and Carrying: (Required frequency is: Not required (0%), Occasional (1–33%), Frequent (34–66%), Continuous (67–100%))

• Up to 10 lbs.: Occasional
• Up to 20 lbs.: Occasional
• Up to 35 lbs.: Occasional
• Team‑lift only (over 35 lbs.): Not required

• Highly inclusive and class‑leading healthcare options to include family planning, mental health, and pet insurance.
• Employee assistance programs that support total well‑being with complimentary sessions offered each and every month.
• Company‑matched and fully vested 401K retirement program that starts immediately from date of enrollment.
• Annual bonus program, High5 employee recognition and awards platform, quarterly and annual employee recognition.
• Simplified access to self‑guided and representative‑supported short and long‑term financial wellness and retirement planning.
• Educational Assistance & Reimbursement Program.
• Inclusion programs and associated employee resource groups that promote representation and belonging.
• Leadership, career, and mentorship development program opportunities at all levels across the organization.
• Several on‑site cafés, plentiful snack and beverage kitchens, revolving on‑site vendor visits and employee events.
• Collaborative and motivating culture routed in continuous personal and professional growth and much more.
• Shuttle rides to and from work!

Pre‑employment drug testing is required.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. All qualified individuals are required to perform the essential functions of the job with or without reasonable accommodation.

Due to the high volume of responses, we will only be able to respond to candidates of interest. All candidates must have valid authorization to work in the U.S. without restriction.