IT/OT Cyber Security Manager

Carmeuse • Pittsburgh, PA

156d • $130,000 - $150,000

About The Position

We are seeking a pragmatic, collaborative individual that can draw on their experience with real-world cyber risks and industrial system constraints. This person will lead the deployment of cybersecurity tools, improve network segmentation, enhance threat detection, and close critical gaps in patching, access control, and asset management. This person will directly strengthen Carmeuse’s ability to prevent, detect, and respond to cyber threats across its global operations — always with IT/OT convergence in mind.

Requirements

• Master’s degree in industrial automation, cybersecurity, computer science, information technology, or equivalent experience.
• Minimum 7 years of combined IT or OT experience, including at least 2 years in an OT/industrial cybersecurity environment (e.g., production sites, SCADA, PLCs, DCS).
• Demonstrated hands-on experience implementing cybersecurity controls in OT environments — including asset visibility, network segmentation, secure remote access, and vulnerability remediation.
• Solid knowledge of cybersecurity fundamentals and domains such as risk assessments, access control, incident response, vulnerability management, and security policy development.
• Deep understanding of the threat landscape for industrial environments, including risks tied to network-connected OT/ICS systems.
• Strong generalist profile in cyber/information security, with the ability to dive deep into technical topics when needed and explain risks in a practical, business-relevant way.
• Demonstrated ability to balance security with operational reality — applying common sense, working within real-world constraints, and finding consensus between conflicting priorities across IT, OT, and production teams.
• Comfortable making progress in imperfect environments, where legacy systems, technical debt, or limited resources are part of the challenge — without losing focus on risk reduction and long-term improvement.
• Proven ability to lead global, cross-functional security projects and work with both technical and non-technical stakeholders in a manufacturing environment.
• Holds or working toward relevant certifications such as CISSP, CISM, GICSP, or equivalent.

Nice To Haves

• Strong awareness of emerging trends in both IT and OT technologies, with a pragmatic view on what’s feasible in industrial operations.

Responsibilities

• Own and drive the execution of Carmeuse’s global OT cyber security strategy, in alignment with the Global Security and Technology Team, and broader IT/OT convergence objectives.
• Lead the implementation and ongoing operation of core cyber security platforms in the OT landscape, including asset inventory, vulnerability management, network segmentation, and secure remote access.
• Participate in the design and architecture of cybersecurity controls and technologies that span both IT and OT environments, ensuring practical fit-for-purpose solutions in industrial settings and aligned to the Carmeuse strategy.
• Plan, coordinate, and execute OT cyber security assessments in collaboration with internal stakeholders, external partners, and OT engineering teams.
• Define and maintain OT cyber security governance with monthly IT/OT security steerco, including clear roles and responsibilities, decision rights, and escalation paths across sites and functions.
• Lead the Continuous Improvement Program, regularly testing OT/IT security policies and operational readiness through drills, tabletop exercises, and lessons-learned reviews.
• Develop and maintain OT security standards and implementation guidelines for global use, and guide regional and site-level teams in building and executing local adoption roadmaps.
• Manage and scale a targeted cyber security awareness and training program for OT and production site personnel, tailored to the realities of operational teams.
• Research, evaluate, and participate in the selection of IT/OT security technologies and partners through structured RFPs, PoCs, and integration planning — ensuring long-term sustainability and compatibility with Carmeuse's industrial and IT environments.
• Serve as a trusted, hands-on advisor to plant managers, engineers, and IT teams — balancing cyber risk reduction with operational continuity and practical constraints.

Benefits

• Salary range for this position is $130,000-$150,000 as well as an annual bonus plan
• Paid holidays and vacation time
• Group medical/pharmacy insurance options with company funded health care spending accounts
• Dental insurance & Vision insurance
• A 401k account with company matching contribution
• A robust Wellness program with financial rewards
• Company-paid life insurance and short-term and long-term disability insurance
• Options to purchase additional life insurance (employee, spouse, and child) and additional employee long-term disability insurance.
• Employee Assistance Program (EAP)
• Tuition benefits including professional certifications
• Employee referral program

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Master's degree
• Number of Employees: 1,001-5,000 employees