Cybersecurity Auditor: Network, Firewall & OT Security

The Coca-Cola Company; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

The Coca-Cola Company is seeking a highly motivated Cybersecurity Auditor with a focus on Network & Firewall Management and Operational Technology to join the Internal Audit Team. The role provides independent assurance and advisory services on cybersecurity risks, controls, governance, and compliance, emphasizing network security, firewall management, and OT security.

You will partner with Information Security, Risk Management, and Compliance stakeholders to assess whether network security

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Information Technology, or a related field.
• Two to five years of experience in Cybersecurity, Information Security, Network Security, IT Audit, Cybersecurity Audit, Firewall Administration, Network Engineering, Operational Technology Security, or related disciplines.
• Understanding of cybersecurity principles, risks, controls, and governance practices.
• Knowledge of network security concepts and control frameworks.

Responsibilities

• Execute risk-based audits, advisory reviews, and assessments focused on network security, firewall management, operational technology environments, network segmentation, intrusion prevention, and related cybersecurity controls.
• Evaluate the design and operating effectiveness of controls that prevent, detect, and respond to unauthorized access across enterprise networks, cloud environments, OT networks, industrial control systems, and critical technology infrastructure.
• Assess the governance, administration, and security of enterprise firewalls, cloud-native network security services, network access controls, and related perimeter defense technologies.
• Review firewall rule management, network configuration management, and change management processes, including provisioning, approvals, implementation, monitoring, recertification, and decommissioning activities.
• Evaluate network architecture and segmentation strategies across corporate, cloud, operational technology, and vendor-connected environments to determine whether critical assets are appropriately isolated and protected.
• Assess controls supporting remote access solutions, VPN technologies, third-party connectivity, internet-facing systems, DMZ environments, identity‑aware network controls, and Zero Trust architectures.
• Evaluate the effectiveness of security monitoring capabilities, including intrusion detection and prevention systems, network detection and response solutions, security event monitoring, logging, alerting, and threat detection processes.
• Assess security controls over network infrastructure and related technologies, including routers, switches, wireless networks, load balancers, cloud networking components, industrial network devices, and supporting management platforms.
• Review cybersecurity controls within operational technology environments, including industrial control systems, SCADA systems, manufacturing networks, facility technologies, and other critical infrastructure components.
• Evaluate controls supporting hybrid network environments, cloud networking services, network segmentation models, and Zero Trust security architectures.
• Review controls over internet‑facing services, administrative network access, network service accounts, machine‑to‑machine communications, and vendor connectivity.
• Evaluate governance and security controls supporting cloud networking, APIs, infrastructure integrations, and interconnected enterprise environments.
• Assess segmentation controls, network zoning, access restriction mechanisms, and perimeter defense frameworks.
• Evaluate monitoring, logging, alerting, and detective controls designed to identify unauthorized network activity, anomalous traffic patterns, potential intrusions, and network security events.
• Utilize data analytics and technology‑enabled audit techniques to analyze firewall rulesets, network configurations, traffic patterns, connectivity paths, security events, and anomalous network activity.
• Identify control deficiencies, emerging threats, cybersecurity risks, and opportunities to strengthen network security, OT security, infrastructure resilience, and protection of enterprise assets.
• Develop clear, practical, and risk‑informed recommendations that enhance network security, perimeter defenses, OT security, infrastructure resilience, and overall cybersecurity maturity.
• Monitor emerging cybersecurity threats, vulnerabilities, attack techniques, and regulatory developments.
• Evaluate cybersecurity risks associated with digital transformation initiatives and evolving network architectures.
• Consider cybersecurity implications related to cloud adoption, software‑defined networking, automation, and new technologies.
• Support audit coverage of Artificial Intelligence governance, AI‑enabled business processes, and AI security risks when applicable.
• Identify technology and cybersecurity trends that may affect organizational risk exposure.
• Utilize data analytics and technology‑enabled auditing techniques to enhance audit effectiveness.
• Analyze firewall rulesets, network traffic, security logs, threat intelligence data, and network activity to identify risk indicators.
• Leverage automation and analytical tools to improve audit efficiency and coverage.
• Build collaborative relationships with Information Security, Network Engineering, Infrastructure Teams, Risk Management, Compliance, and business leaders.
• Communicate audit observations and risk insights effectively to management.
• Assist in preparing audit reports, presentations, and executive communications.
• Support issue validation and remediation monitoring activities.

Skills

Network Security

Firewall Management

Operational Technology Security

Risk-based auditing

Internal controls

Security monitoring

Education

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Information Technology, or related field

Tools

Palo Alto

Cisco Firepower

Fortinet

Zscaler

Job description

The Coca-Cola Company is seeking a highly motivated Cybersecurity Auditor with a focus on Network & Firewall Management and Operational Technology to join the Internal Audit Team. The role provides independent assurance and advisory services on cybersecurity risks, controls, governance, and compliance, emphasizing network security, firewall management, and OT security.

You will partner with Information Security, Risk Management, and Compliance stakeholders to assess whether network security