Summary
The Cybersecurity Manager (High-Tech Manufacturing & Semiconductors) leads the strategic alignment, implementation, and management of the organization's information and operational security frameworks. This role bridges the gap between complex enterprise risk strategies and practical technical engineering controls. Operating in a high-value manufacturing environment, this manager is primarily responsible for Governance, Risk, and Compliance (GRC), while possessing the technical fluency required to collaborate effectively with IT, Operational Technology (OT), and engineering teams. The core mission is to protect proprietary intellectual property (IP), secure advanced fabrication supply chains, ensure operational uptime, and maintain audit readiness against global regulatory standards.
Responsibilities
- Core Governance, Risk & Compliance (GRC) Responsibilities
- Framework Alignment: Define, execute, and mature information security policies mapped explicitly to ISO/IEC 27001, NIST SP 800-53, and semiconductor industry specifications (e.g., SEMI cybersecurity standards).
- Risk Management & Audits: Lead formal risk assessments across corporate networks. Manage internal and external audits, compiling risk registers and mapping mitigation paths.
- Third-Party Supply Chain Security: Establish comprehensive vendor assessment criteria to evaluate and continually audit external component suppliers, equipment manufacturers, and outsourced service providers.
- Regulatory Compliance: Coordinate and ensure enterprise compliance with international regulations relevant to manufacturing data flows, including GDPR, export control constraints, and client-specific data non-disclosure mandates.
- Incident Response Governance: Design, maintain, and run periodic simulation tabletops for the Cyber Incident Response Plan, ensuring clear communication pathways between executive stakeholders, legal counsel, and technical investigators.
- Technical Oversight & Collaboration
- OT/ICS Collaboration: Interface directly with operational technology and SCADA engineering teams to ensure GRC baselines extend to automated fabrication equipment, testing cleanrooms, and physical plant networks without disrupting production availability.
- Architectural Alignment: Review technical designs for Identity & Access Management (IAM), network zoning/micro-segmentation, and zero-trust remote access architecture to ensure strict compliance with internal security baselines.
- Vulnerability Lifecycle Management: Collaborate with security operations and IT engineering to translate vulnerability scan results and penetration testing findings into prioritized, risk-based remediation plans for production-critical servers and workstations.
Qualifications
Education
- Bachelor's degree in computer science, Information Security, Management Information Systems (MIS), Engineering, or a related field (or equivalent practical experience).
Experience
- 5+ years of progressive experience in cybersecurity or IT risk management, with a minimum of 2 years in a dedicated leadership or management function within a manufacturing, aerospace, automotive, or semiconductor environment.
Language
- Mandarin speaking
Preferred
• Technical Knowledge Base: Deep familiarity with network security constructs, IAM platforms, endpoint protection suites, SIEM logging architectures, and automated asset inventorying tools.
Licenses/certifications
• Industry Certifications: Professional management credentials are highly preferred (e.g., CISM, CISSP, CRISC, or CISA).
Location
This position will be on-site based in Sugar Land, Texas.
Why AOI?
In addition to competitive salary, AOI offers
- Flexible and competitive health (medical, dental, vision) plans offer the employee with the right options to meet individual and family needs
- Employer matching on 401(k) deferrals
- Generous PTO policy, with unused PTO payout at end of the year
- Relocation package available within US
- Immigration sponsorships (Must be currently authorized to work in the US)
Skills Required
- Bachelor's degree in computer science, information security, management information systems, engineering, or a related field, or equivalent practical experience
- At least 5 years of progressive experience in cybersecurity or IT risk management
- At least 2 years of leadership or management experience
- Experience in a manufacturing, aerospace, automotive, or semiconductor environment
- Familiarity with network security, IAM platforms, endpoint protection, SIEM architectures, and automated asset inventory tools
- CISM, CISSP, CRISC, or CISA certification
- Current authorization to work in the United States
What We Do
Applied Optoelectronics, Inc. | NASDAQ: AAOI AOI is a leading designer and manufacturer of fiber optic networking products. We primarily serve three growing end-markets: cable television broadband, fiber-to-the-home, and internet data centers. We are vertically integrated with a product portfolio from laser chips, components, sub-assemblies and modules, to complete turn-key equipment. All three of our end-markets are driven by bandwidth demand fueled by the growth of network connected devices, such as video traffic, cloud computing and online social networking. To address this increased demand, CATV and telecommunications service providers are investing to improve their networks in competition to deliver voice, video, and data services to their subscribers. Rising bandwidth consumption is also driving demand for higher speed server connections in the internet data center market. As a result of these trends, fiber optic networking technology has become fundamental in all three of our target markets to meet these needs. Our vertical integration, broad product lines, and in-house design capability uniquely position AOI to serve these markets and offer us the flexibility to address tomorrow's fiber optic applications. To learn more about our company and products, we invite you to visit our website. Website www.ao-inc.com Facebook tinyurl.com/ycxcsbwx Instagram tinyurl.com/rqsbpk5 Twitter tinyurl.com/rd6dtvn
