IT/OT Security Lead

Job Title:

Job Summary:

IT/OT Security Lead

Key Responsibilities:

• Review and approve firewall access requests (CheckPoint & Palo Alto).
• Act as gatekeeper for firewall governance in IT/OT environments.
• Lead IT/OT segmentation initiatives; validate data flows and connectivity.
• Conduct and guide IT/OT risk assessments and define remediation plans.
• Document and evaluate cybersecurity controls across IT/OT setups.
• Collaborate with architects to align with global security strategies.
• Drive firewall process automation and documentation workflows.
• Mentor engineers/analysts on security process and documentation.
• Participate in incident investigations related to segmentation or access risks.
• Report on cybersecurity KPIs and exceptions.
• Conduct internal awareness sessions on security governance.
  

Must-Have Skills & Experience:

• 812 years in IT/OT security, risk assessments, and segmentation.
• Advanced experience with

  CheckPoint and Palo Alto

  firewall platforms.
• Strong knowledge in IT/OT architecture, network design & segmentation.
• Hands-on experience in regulated environments (GxP, GMP, CSV).
• Familiarity with

  MES, BMS, ICS

  and other OT domain systems.
• Knowledge of frameworks such as

  ISA/IEC 62443

  ,

  NIST 800-53/82

  .
• Strong expertise in

  CheckPoint and Palo Alto firewalls

• Deep knowledge of

  IT/OT architecture

  &

  network segmentation

• Experience in

  regulated environments (GxP, GMP, CSV)

• Familiarity with

  ICS, MES, BMS systems

• Understanding of

  ISA/IEC 62443

  ,

  NIST 800-53/82

• Certifications:

  CISSP, GICSP, 62443 Specialist, Security+

Responsibilities:

• Review/approve firewall access (

  CheckPoint & Palo Alto

  )
• Drive

  IT/OT segmentation

  , validate data flows
• Conduct risk assessments, define

  remediation plans

• Align with

  security architects

  and global standards
• Lead

  automation of firewall request workflows

• Mentor junior engineers & analysts
• Support audits, incidents &

  GxP/GMP compliance

Education:

• Bachelors degree

  in Computer Science, InfoSec, or Automation Engineering (required)

• Masters degree

  in Information Security, IT Management, or Systems Engineering (preferred)