Sr Manager Tech Consumer Risk & Assurance US

Senior Manager Tech Consumer Risk & Assurance US – Tampa, FL

At PMI U.S., we are building a modern nicotine business—focused on helping make a future without cigarettes a reality in America. As the U.S. businesses of Philip Morris International, we are investing in new products, science, and capabilities to provide the approximately 25 million legal age adults who still smoke with better alternatives.

Our approach is rooted in innovation, responsible marketing, and a growing U.S. footprint that spans manufacturing, technology, and commercial operations across the country.

That creates real opportunity. You’ll have the space to take ownership, develop new ideas, and contribute to work that is shaping our business and the category. We’re looking for people who are curious, collaborative, and motivated by progress—because the scale of what we’re building creates room to grow in different directions.

The role combines strategic leadership, governance oversight and hands-on engagement across Asset Assurance, IT Resilience, Security Operations and Security Engineering. It partners closely with service managers, product group/teams, engineering, architecture, and information security (InfoSec) to strengthen security posture, improve operational resilience, assure technology asset governance and enhance security operations capability across the technology lifecycle.

The role is also expected to champion practical AI-enabled cybersecurity use cases, ensuring AI, automation and analytics are used responsibly to improve threat detection, vulnerability prioritisation, risk insights, incident readiness, control monitoring and security reporting while maintaining human oversight, data protection and policy alignment.

• Senior experience in technology security, cybersecurity, IT risk, controls assurance, platform security, resilience, or related disciplines within complex enterprise environments.

• Strong knowledge of modern technology ecosystems, including cloud, SaaS, IaaS, PaaS, APIs, microservices, CI/CD, application security, and operational support models.

• Proven ability to integrate security, risk, and control requirements into Agile, DevOps, platform operations, and service management practices.

• Experience with asset governance, technology inventories, service ownership, configuration management, and technology lifecycle risk management.

• Expertise in disaster recovery, business continuity, resilience testing, recovery planning, supplier resilience assessments, and remediation management.

• Experience in security operations, incident response, vulnerability management, security monitoring, operational playbooks, and reporting.

• Strong understanding of secure engineering, threat modeling, DevSecOps, security testing, cloud security, and platform hardening.

• Practical knowledge of AI, machine learning, and generative AI applications in cybersecurity, including threat intelligence, anomaly detection, phishing and malware triage, vulnerability prioritization, SOC automation, and risk reporting.

• Ability to assess AI-enabled security tools and use cases, including benefits, limitations, data requirements, control considerations, and human oversight needs.

• Awareness of AI-related security risks, including prompt injection, data leakage, model misuse, adversarial attacks, insecure integrations, and sensitive data exposure.

• Ability to translate complex security, resilience, asset, AI, and risk data into clear, actionable insights for senior stakeholders.

• Excellent consulting, influencing, facilitation, and executive communication skills, with a pragmatic, risk-based approach.

• Ability to