Operational Technology (OT) Security Architect (REMOTE)

• Security Architecture Design: Design and lead the implementation of security architectures for new systems and modifications of existing systems. Lead discussions pertaining to security; ensure project planners and business stakeholders are aligned on expectations and intended outcomes.
• Architectural Strategy & Policy: Define and maintain the OT security architecture, standards, and policies in support of Grainger’s business objectives.
• Risk Assessment & Roadmaps: Lead OT risk assessments, gap analyses, and develop a multi-year OT security roadmap influenced by Grainger’s business objectives and risk appetite.
• Technology Governance & Selection: Assess existing security technologies and evaluate new technologies, ensuring alignment with the architectural vision.
• Compliance & Audit Management: Establish governance frameworks and oversee compliance to Grainger’s internal standards, managing audit readiness and assisting with remediation tracking.
• Cross-Functional Leadership: Act as the primary liaison between OT operations, IT security, engineering, and senior leadership, ensuring cohesive security partnership and clear communication of risk.

You have:

• Bachelor's/Master's Degree in a relevant field (e.g., Cybersecurity, Electrical Engineering, Computer Science, etc.); or an equivalent level of knowledge gained through on-the-job experience.
• Relevant industry certifications such as CISSP, GICSP, or ISA/IEC 62443 Cybersecurity Expert
• 10+ years of direct experience in the cybersecurity field with minimum 5 years in OT Security

Have strong technical understanding of the following:

• Secure Remote Access methods specific to the OT domain. Experience may include Zscaler, Beyond Trust, CyberArk, Xage, etc.
• Network segmentation and the supporting architecture patterns
• OT network monitoring and intrusion detection systems. These may include Dragos, Nozomi, and Claroty.
• Modern-day architectures which account for the hybrid and connected nature of many new & emerging technologies (Industry 4.0, edge compute, and CPwE Cloud Connectivity).
• A working understanding of major Cloud Service Providers
• Experience creating OT security policies and supporting technical standards
• Experience with threat modeling frameworks and applying these concepts to the OT/ICS domain
• Working understanding of the IEC/ISA 62443 framework