Cybersecurity Auditor – Network & Firewall Management and Operational Technology (OT)

Coca-Cola • Atlanta, GA

2d

About The Position

The Coca-Cola Company is seeking a Cybersecurity Auditor to join its Internal Audit Team, with a focus on Network & Firewall Management and Operational Technology (OT). The role provides independent assurance and advisory services related to cybersecurity risks, controls, governance, and compliance. It works with business, technology, Information Security, Risk Management, and Compliance stakeholders to assess whether network security controls protect organizational assets, meet regulatory requirements, and align with enterprise risk objectives.

The position assesses security across enterprise, cloud, and OT environments, including network segmentation, firewall management, intrusion prevention, remote access, third-party connectivity, industrial control systems, and cybersecurity governance. It also monitors emerging threats and regulatory developments and may support audits of AI governance, AI-enabled processes, and AI security risks.

This is an individual-contributor role with no direct reports, based in Atlanta, Georgia. Travel is described as 26%–50% in the posting, with the role details also stating 30% domestic and international travel. Relocation is not provided.

Requirements

• Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Information Technology, or a related field.
• Two to five years of experience in Cybersecurity, Information Security, Network Security, IT Audit, Cybersecurity Audit, Firewall Administration, Network Engineering, Operational Technology Security, or related disciplines.
• Understanding of cybersecurity principles, risks, controls, and governance practices.
• Knowledge of network security concepts and control frameworks.
• Understanding of network architecture and security principles.
• Understanding of network segmentation and micro-segmentation.
• Understanding of firewall administration and rule management.
• Understanding of Intrusion Detection and Prevention Systems.
• Understanding of Network Detection and Response solutions.
• Understanding of Virtual Private Networks.
• Understanding of cloud network security.
• Understanding of OT, Industrial Control Systems, and SCADA security concepts.
• Understanding of security monitoring, logging, and incident detection processes.
• Strong analytical, problem-solving, and communication skills.

Nice To Haves

• Experience auditing or administering network security technologies such as Palo Alto, Check Point, Cisco Firepower, Fortinet, Juniper, Zscaler, Claroty, or similar platforms.
• Experience auditing cloud network security environments such as Azure, Amazon Web Services, or Google Cloud.
• Experience assessing OT environments, industrial control systems, manufacturing technology, SCADA environments, or critical infrastructure security controls.
• Familiarity with the NIST Cybersecurity Framework, NIST 800-53, ISO 27001, COBIT, CIS Controls, or similar frameworks.
• Professional certifications such as CISA, CISSP, CRISC, Security+, CISM, or CCNP Security.
• Experience in AI governance, AI risk management, and AI security concepts.
• Experience assessing controls related to AI development, deployment, or usage.
• Familiarity with AI governance frameworks, model risk considerations, and AI data protection controls.
• Experience leveraging AI-enabled tools for audit planning, testing, analytics, or reporting.

Responsibilities

• Execute risk-based audits, advisory reviews, and assessments focused on network security, firewall management, OT environments, network segmentation, intrusion prevention, and related cybersecurity controls.
• Evaluate the design and operating effectiveness of controls that prevent, detect, and respond to unauthorized access across enterprise networks, cloud environments, OT networks, industrial control systems, and critical technology infrastructure.
• Assess the governance, administration, and security of enterprise firewalls, cloud-native network security services, network access controls, and perimeter defense technologies.
• Review firewall rule management, network configuration management, and change management processes, including provisioning, approvals, implementation, monitoring, recertification, and decommissioning.
• Evaluate network architecture and segmentation strategies across corporate, cloud, OT, and vendor-connected environments.
• Assess controls for remote access, VPNs, third-party connectivity, internet-facing systems, DMZ environments, identity-aware network controls, and Zero Trust architectures.
• Evaluate security monitoring capabilities, including intrusion detection and prevention, network detection and response, event monitoring, logging, alerting, and threat detection.
• Assess security controls over network infrastructure and related technologies, including routers, switches, wireless networks, load balancers, cloud networking components, industrial network devices, and management platforms.
• Review cybersecurity controls in OT environments, including industrial control systems, SCADA systems, manufacturing networks, facility technologies, and other critical infrastructure.
• Review controls over internet-facing services, administrative network access, network service accounts, machine-to-machine communications, and vendor connectivity.
• Evaluate governance and security controls for cloud networking, APIs, infrastructure integrations, and interconnected enterprise environments.
• Use data analytics and technology-enabled audit techniques to analyze firewall rulesets, network configurations, traffic patterns, connectivity paths, security events, and anomalous activity.
• Identify control deficiencies, emerging threats, cybersecurity risks, and opportunities to strengthen network and OT security, infrastructure resilience, and protection of enterprise assets.
• Develop practical, risk-informed recommendations to enhance network security, perimeter defenses, OT security, infrastructure resilience, and cybersecurity maturity.
• Monitor cybersecurity threats, vulnerabilities, attack techniques, and regulatory developments, and evaluate risks associated with digital transformation and evolving network architectures.
• Consider cybersecurity implications of cloud adoption, software-defined networking, automation, and new technologies.
• Support audit coverage of AI governance, AI-enabled business processes, and AI security risks when applicable.
• Leverage automation and analytical tools to improve audit efficiency and coverage, including analysis of firewall rulesets, network traffic, security logs, threat intelligence, and network activity.
• Build collaborative relationships with Information Security, Network Engineering, Infrastructure Teams, Risk Management, Compliance, and business leaders.
• Communicate audit observations and risk insights to management; assist with audit reports, presentations, and executive communications.
• Support issue validation and remediation monitoring activities.

Benefits

• Medical, financial, and/or other benefits (dependent on the position).
• The company describes a commitment to diversity, inclusion, and belonging.
• The company describes opportunities to develop, learn, and grow through its global network.
• The company describes an agile work environment that empowers employees to innovate and discover solutions.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level