Job description

You will work as part of the Apple Information Security - Business Engagement team, helping drive the day-to-day security needs of our Product Operations partners, while delivering the overall strategies and services of Apple Information Security. * Serve as the primary AIS point of contact for Product Operations & Supply Chain teams, developing a deep understanding of manufacturing systems, supply chain infrastructure, operational technology, and global logistics to identify and address security risks. * Collaborate with AIS service teams to ensure security offerings align with Product Operations needs and priorities, proactively identifying gaps and opportunities. * Translate Product Operations business requirements to technical requirements that drive AIS engineering decisions and service delivery. * Create and maintain comprehensive security roadmaps tailored to Product Operations, accounting for manufacturing cycles, supply chain constraints, and operational realities. * Provide subject matter expertise on security advisement, ensuring alignment with enterprise security standards and policies while understanding operational constraints. * Partner with embedded security teams and individuals across Product Operations to support risk management and mitigation strategies. * Drive cross-functional collaboration to resolve escalations and ensure timely resolution of security incidents impacting manufacturing or supply chain operations. * Oversee and deliver threat models and security architecture reviews for Product Operations systems, manufacturing infrastructure, and supply chain platforms. * Represent AIS in Product Operations executive meetings, providing updates, insights, and strategic guidance to foster strong security culture and alignment. * Measure and communicate quantifiable impacts of AIS security services with Product Operations stakeholders. * Continuously evaluate the effectiveness of AIS services in meeting supply chain and manufacturing business needs, recommending improvements and advocating for Product Operations interests within AIS to drive continuous improvement in service delivery. 10+ years of experience in Information Security or related security fields. 8+ years of experience in securing large operations, supply chain, or manufacturing environments. Strong knowledge of supply chain processes and technologies, with a focus on identifying and mitigating technical security risks. Extensive experience with security threat modeling and architecture reviews for operational technology and manufacturing systems. Expertise in security risk management, governance, and compliance frameworks (e.g., NIST, ISO 27001). * Expertise in SaaS security and cloud platforms used in supply chain operations. * Expertise in automating and improving security processes and applications. * Proven ability to build and maintain effective cross-functional relationships, including at the executive level. * Strong communication and presentation skills, with the ability to translate technical concepts for non-technical audiences. * Track record of successfully managing security escalations and delivering quantifiable security improvements. * Ability to work in a fast-paced, dynamic environment and manage multiple priorities effectively. Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field. Master's degree in Business Administration (MBA), Information Security, or a related discipline. Experience or exposure to working with Managed Service Security Providers (MSSP). Experience with operational technology (OT) security and industrial control systems. Knowledge of manufacturing systems and infrastructure security best practices. Experience with global supply chain security programs and supplier risk management. Understanding of logistics platforms and distribution network security.

Requirements

Must-haves

Collaborate with AIS service teams to ensure security offerings align with Product Operations needs and priorities, proactively identifying gaps and opportunities.
Translate Product Operations business requirements to technical requirements that drive AIS engineering decisions and service delivery.
Create and maintain comprehensive security roadmaps tailored to Product Operations, accounting for manufacturing cycles, supply chain constraints, and operational realities.
Provide subject matter expertise on security advisement, ensuring alignment with enterprise security standards and policies while understanding operational constraints.
Partner with embedded security teams and individuals across Product Operations to support risk management and mitigation strategies.
Drive cross-functional collaboration to resolve escalations and ensure timely resolution of security incidents impacting manufacturing or supply chain operations.
Oversee and deliver threat models and security architecture reviews for Product Operations systems, manufacturing infrastructure, and supply chain platforms.
Represent AIS in Product Operations executive meetings, providing updates, insights, and strategic guidance to foster strong security culture and alignment.
Measure and communicate quantifiable impacts of AIS security services with Product Operations stakeholders.
10+ years of experience in Information Security or related security fields.
8+ years of experience in securing large operations, supply chain, or manufacturing environments.
Strong knowledge of supply chain processes and technologies, with a focus on identifying and mitigating technical security risks.
Extensive experience with security threat modeling and architecture reviews for operational technology and manufacturing systems.
Expertise in security risk management, governance, and compliance frameworks (e.g., NIST, ISO 27001).
Expertise in SaaS security and cloud platforms used in supply chain operations.
Expertise in automating and improving security processes and applications.
Proven ability to build and maintain effective cross-functional relationships, including at the executive level.
Strong communication and presentation skills, with the ability to translate technical concepts for non-technical audiences.
Track record of successfully managing security escalations and delivering quantifiable security improvements.
Ability to work in a fast-paced, dynamic environment and manage multiple priorities effectively.
Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
Master's degree in Business Administration (MBA), Information Security, or a related discipline.
Experience or exposure to working with Managed Service Security Providers (MSSP).
Experience with operational technology (OT) security and industrial control systems.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: apple
Effort: medium