MACOM · 1 day ago
Information Security Engineer, Principal
MACOM is a leading semiconductor manufacturer specializing in Data Center, Telecommunication, and Industrial and Defense applications. They are seeking a Principal Information Security Engineer to lead the development and implementation of their enterprise-wide resilience program, focusing on Business Continuity and Disaster Recovery lifecycle management.
Telecom & CommunicationsSemiconductorIndustrialElectronicsManufacturingInformation TechnologyInternetMachinery ManufacturingTechnical SupportWireless
Responsibilities
Lead the development, maintenance, and continuous improvement of the enterprise BCDR program within the Information Security function
Establish governance processes, reporting structures, and key performance indicators aligned to organizational risk appetite and compliance requirements
Ensure BCDR practices align with NIST CSF, NIST 800-34, ISO 22301, CMMC, and internal ISMS controls
Facilitate cross-functional collaboration among IT, Security, Operations, Manufacturing, HR, Facilities, Legal, and Business Owners
Plan and conduct structured interviews, workshops, and data-gathering sessions with business leaders and process owners
Document critical business processes, dependencies, system interrelationships, and recovery time objectives (RTOs/RPOs)
Analyze operational, financial, regulatory, and reputational impacts to determine organizational priorities for continuity
Maintain an enterprise BIA repository and ensure periodic review and updates
Identify vulnerabilities, single points of failure, and resilience gaps revealed through BIAs and risk assessments
Recommend and document mitigation strategies, compensating controls, and resilience enhancements
Work with IT Architecture, Infrastructure, and Security teams to ensure alignment with redundancy, high-availability, and site-failover strategies
Develop, document, and maintain Disaster Recovery plans, including system-specific runbooks, recovery steps, communication flows, and escalation procedures
Coordinate with IT Operations, Cloud/Infrastructure, Application Owners, and Security to ensure DR procedures are complete, testable, and auditable
Ensure DR documentation aligns with RTO/RPO requirements, and compliance frameworks
Lead tabletop exercises, functional tests, and full-scale DR simulations
Document test results, track remediation activities, and report on program maturity to leadership and audit stakeholders
Validate that DR plans remain current with system changes, architectural decisions, and change management activities
Coordinate BCDR procedures with the Cyber Incident Response Plan and Crisis Management Team
Ensure seamless integration between recovery plans and security response workflows
Participate in major incident response activities when continuity or recovery actions are required
Develop and maintain BCDR documentation repositories, templates, and standards
Provide status updates, dashboards, and executive-level reports detailing program readiness and risk exposure
Prepare program evidence for internal audits, customer assessments, and compliance reviews (CMMC, ISO, DFARS, etc.)
Qualification
Required
Bachelor's degree in information security, Information Technology, Business Continuity, or related field (or equivalent experience)
5–7+ years of experience in Business Continuity, Disaster Recovery, Information Security, or related resilience disciplines
Demonstrated experience conducting BIAs, developing DR plans, and running continuity exercises
Strong understanding of frameworks such as NIST CSF, NIST SP 800-34, ISO 22301, and CMMC
Excellent interviewing, facilitation, documentation, and analytical skills
Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership
Preferred
Professional certifications (e.g., CBCP, MBCI, ISO 22301 Lead Implementer/Auditor, CISSP, CISM)
Experience developing or maturing BCDR governance programs in manufacturing, engineering, defense contracting, or other critical industries
Familiarity with IT architecture, high-availability infrastructure, cloud resiliency, and cybersecurity incident response
Benefits
Health, dental, and vision insurance.
Employer-sponsored 401(k) plan.
Paid time off.
Professional development opportunities.
Company
MACOM
MACOM is a supplier of high-performance analog RF, microwave, millimeterwave, and photonic semiconductor products.
Funding
Current Stage
Public CompanyTotal Funding
$43.75M2012-03-15IPO
2011-01-12Private Equity
2010-06-08Private Equity· $43.75M
Leadership Team
Recent News
legacy.thefly.com
2026-02-05
2026-01-24
2026-01-13
Company data provided by crunchbase