IT/OT Security Lead

Job Title: IT/OT Security Lead
Department: IT Security & Compliance
Reports To: Head of OT Security
Experience Required: 8 to 12 years
Employment Type: Full-Time, Permanent

Job Summary:

Ey is looking for an experienced IT/OT Security Lead to drive cybersecurity initiatives across both IT and OT environments. This role is key to strengthening segmentation, firewall governance, and automation-led security processes in highly regulated manufacturing setups. You will serve as a bridge between operations, automation, and security teams.

Key Responsibilities:

• Review and approve firewall access requests (CheckPoint & Palo Alto).
• Act as gatekeeper for firewall governance in IT/OT environments.
• Lead IT/OT segmentation initiatives; validate data flows and connectivity.
• Conduct and guide IT/OT risk assessments and define remediation plans.
• Document and evaluate cybersecurity controls across IT/OT setups.
• Collaborate with architects to align with global security strategies.
• Drive firewall process automation and documentation workflows.
• Mentor engineers/analysts on security process and documentation.
• Participate in incident investigations related to segmentation or access risks.
• Report on cybersecurity KPIs and exceptions.
• Conduct internal awareness sessions on security governance.
  

Must-Have Skills & Experience:

• 812 years in IT/OT security, risk assessments, and segmentation.
• Advanced experience with CheckPoint and Palo Alto firewall platforms.
• Strong knowledge in IT/OT architecture, network design & segmentation.
• Hands-on experience in regulated environments (GxP, GMP, CSV).
• Familiarity with MES, BMS, ICS and other OT domain systems.
• Knowledge of frameworks such as ISA/IEC 62443, NIST 800-53/82.
• Strong expertise in CheckPoint and Palo Alto firewalls
• Deep knowledge of IT/OT architecture & network segmentation
• Experience in regulated environments (GxP, GMP, CSV)
• Familiarity with ICS, MES, BMS systems
• Understanding of ISA/IEC 62443, NIST 800-53/82
• Certifications: CISSP, GICSP, 62443 Specialist, Security+

Responsibilities:

• Review/approve firewall access (CheckPoint & Palo Alto)
• Drive IT/OT segmentation, validate data flows
• Conduct risk assessments, define remediation plans
• Align with security architects and global standards
• Lead automation of firewall request workflows
• Mentor junior engineers & analysts
• Support audits, incidents & GxP/GMP compliance
  

Education:

• Bachelors degree in Computer Science, InfoSec, or Automation Engineering (required)
• Masters degree in Information Security, IT Management, or Systems Engineering (preferred)