Principal - IT/OT Security Engineer

Cargill • Wayzata, MN

6d

About The Position

The Principal, IT/OT Security role leads the strategic design, implementation, and improvement of cybersecurity protective technologies across enterprise and manufacturing environments. As a subject matter authority in cyber engineering and technology operations, the role connects plant IT and operations stakeholders with global cybersecurity capabilities to protect IT and operational technology systems and networks.

The position applies broad knowledge of identity and access management, governance, risk and compliance, and cloud security, with hands-on expertise in incident response, endpoint security, and network security. It balances cyber risk reduction with employee safety, product quality, production stability, legacy and end-of-support technology constraints, and original equipment manufacturer dependencies.

The role works with global cybersecurity teams, plant IT and operations leaders, engineering, risk and control teams, vendors, and other partners. It assesses complex security needs and risks, supports compliance, and coordinates incident response and security changes while prioritizing safe, stable, and reliable manufacturing operations.

Requirements

• At least 6 years of relevant work experience.
• Broad knowledge of identity and access management, governance, risk and compliance, and cloud security.
• Hands-on expertise in incident response, endpoint security, and network security.
• Knowledge of industrial architectures and Purdue model layers.
• Ability to assess complex IT/OT security needs and risks and evaluate controls with regard to manufacturing operations, system criticality, supportability, performance, and availability.

Responsibilities

• Lead the design, implementation, and improvement of cybersecurity protective technologies across IT and manufacturing environments, including endpoint detection and response, network protections, secure remote access, cloud infrastructure controls, and identity and access controls.
• Lead endpoint detection and response, network segmentation and monitoring, partner and original equipment manufacturer connectivity, operational technologies, and Internet of Things security.
• Apply knowledge of industrial architectures and Purdue model layers to assess risks, identify systemic compliance gaps and root causes, and recommend practical improvements, compensating controls, and cost-benefit analyses.
• Coordinate shared cybersecurity initiatives with global cybersecurity teams, business information security officers, plant IT leadership and managers, engineering, operations, and OT technology OEMs.
• Advise on IT service management interfaces, including asset, change, configuration, problem, and incident management.
• Ensure plant-environment security changes meet safety, quality, operational validation, maintenance-window, and rollback requirements.
• Research complex IT and OT security needs, including security requirements definition, architecture and systems analysis, and risk assessment.
• Evaluate agents, patches, configuration changes, and other controls in light of system criticality, end-of-support technology, vendor supportability, performance, and availability.
• Apply security policies, standards, and governance requirements to manufacturing environments; partner with risk and control teams to document exceptions, define proportionate compensating controls, and support compliance.
• Partner with CCO on complex plant IT and OT incident response, coordinating with global incident response, endpoint, network, plant, engineering, and vendor teams on containment, evidence preservation, recovery, and lessons learned.
• Foster collaboration among cybersecurity, business, plant IT and operations, privacy, risk, OEM, external expert, and other internal and external stakeholders to enable security protections and business objectives.

Benefits

• Comprehensive benefit program, including medical and/or other benefits depending on the position and hours worked.
• Discretionary incentive award dependent on company and personal performance.
• Minnesota Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 48 hours per calendar year unless otherwise provided by law.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed