Amer Sports - OT-Security Domain Manager - Altenmarkt im Pongau

Hybrid / Altenmarkt im Pongau, Austria

We’re looking for OT Security Domain Manager for Amer Sports’ office in Altenmarkt im Pongau

At Amer Sports, we are looking for an OT Security Domain Manager to lead and drive Operational Technology (OT) security across our global supply chain network. In this strategic role you will help safeguard manufacturing sites and distribution centers by embedding security into operations, projects, and future growth initiatives. Acting as the key link between Supply Chain, Cyber Security, site leadership, and business stakeholders, you will shape OT security roadmaps, coordinate large-scale security programs, and help reduce cyber risk while maintaining operational continuity, safety, and production availability. If you are passionate about securing critical industrial environments and influencing security strategy across multiple sites, this is an opportunity to make a tangible global impact.

Scope and autonomy

This is a matrix role. You act as the business-domain focal point for OT security across all assigned sites, owning the domain roadmap, rollout coordination, architecture alignment, and risk transparency. You are accountable for domain-level planning, coordination, transparency, and escalation, but not for local operational execution or final plant-level risk acceptance, which remain with local Site Leads and Business Owners. You guide and coordinate local OT Security Site Leads without direct line management, and you operate with high autonomy in planning and coordination. As the role covers multiple sites, some travel is expected.

What you will be doing

You provide business-domain OT security oversight across all assigned sites and act as the primary interface between Supply Chain, Business Owners, Site Managers, the Global OT Security Lead, local OT Security Site Leads, the central Cyber Security Risk Management (CSRM) and Enterprise Risk Management functions, and Group IT.

• Plan, prioritize, and drive consistent implementation of OT security across the domain (roadmap, milestones, ownership, follow-up).
• Manage multi-site OT security initiatives as a program (scope, timeline, dependencies, risks and issues, and stakeholder communications) to ensure consistent execution across locations.
• Maintain and coordinate the business-domain OT security architecture view and rollout planning, aligned with Cyber Security, Enterprise Architecture, and the Global OT Security Lead.
• Coordinate and guide local OT Security Site Leads; track control implementation, local risk transparency, and remediation progress across assigned sites.
• Translate OT security requirements and residual risks into business priorities and investment proposals; support cross-site planning and prioritization.
• Ensure OT security requirements are integrated from the initial design phase of large-scale build projects and embedded throughout the project lifecycle.
• Manage the OT security interface with OEMs, system integrators, and third-party service providers, ensuring security requirements are defined, contracted, and verified for new and existing OT estates.
• Ensure domain OT security activities align with applicable security standards and regulatory obligations (e.g. IEC 62443, NIS2, ISO 27001) and support related audit and assurance activities.
• Drive domain-level OT asset visibility, risk classification, exception tracking, and maturity reporting in alignment with the global OT security framework.
• Provide domain-level reporting on security posture, roadmap progress, and key risks; escalate blockers and decisions as needed.
• Collaborate with the SOC / OT SOC Specialist and relevant teams to ensure OT context is considered in monitoring, incident response, and lessons learned.

What you need to succeed

• Bachelor’s degree (or equivalent) in Information Security, Computer Science, Engineering, Industrial Automation, or a related field.
• Strong understanding of OT environments, manufacturing processes, and supply chain dependencies within the assigned business domain.
• Proven ability to translate OT security requirements into business priorities, rollout roadmaps, and architecture plans.
• Experience coordinating OT security implementation across multiple sites in a structured, programmatic way.
• Project and program management skills to deliver OT security initiatives across multiple locations (multi-site planning, scheduling, dependency management, and stakeholder alignment).
• Solid knowledge of OT cybersecurity frameworks and standards (minimum: IEC 62443 principles).
• Strong stakeholder management and communication skills to align Supply Chain, Cyber Security, site leadership, and OT Security Site Leads.
• IEC 62443 training or certification, or equivalent demonstrable competence.

What we consider a plus

• Domain or enterprise OT security architecture experience, cross-site investment prioritization, residual risk governance, industrial incident response governance, and exposure to a global or matrix operating model.
• Additional training in industrial control systems (ICS) / OT security.
• Industrial or OT security certifications (e.g. GIAC GICSP).
• Relevant cybersecurity certification (e.g. CISSP, CISM).

What’s in it for you

At Amer Sports, you will be part of a global community of people who care about what they do and how they do it. Across our teams and brands we are driven by ambition, collaboration, and a shared purpose of elevating the world through sport.

• Employee product benefits and discounts on quality products from our iconic brands.
• Global collaboration with diverse, international teams across brands, functions, and markets.
• Access to a global network of leading sports and outdoor brands and the opportunities that come with it.
• A culture built on trust, support, and shared responsibility, where success is celebrated as a team.
• A purpose-driven environment supporting healthier, more active lives.
• Small, trusted teams within a global company, where your ideas matter and your work creates real impact.
• Ambitious career development through meaningful work, new challenges, and experienced colleagues.
• Modern technologies and continuously evolving ways of working.

Process

• CV screening: every CV is reviewed by a human.
• Phone screening: a conversation with an Amer Sports recruiter to discuss the role, the organization, and your expectations.
• Interviews: usually one to two rounds, including the hiring manager and prospective team.
• Feedback and decision: we aim to provide feedback throughout the process.

Interested?

Please submit your application via the application form. CVs sent by email will not be considered or processed. If you have any questions or need clarification at any stage, please reach out to [email protected] (HR).

Remuneration is based on the collective agreement for employees in the wood industry. An appropriate overpayment is offered depending on your individual qualifications and professional experience, alongside development opportunities within a globally operating corporate group.

#LI-JB1