IT/OT Security & Compliance Lead

Mondi plc; Boise (ID); On-site; USD 82,000 - 128,000; Full time

Job summary

Mondi is seeking an IT/OT security specialist to strengthen the Information Security Management System (ISMS) and support TISAX and ISO 27001 initiatives. You will work across German sites, collaborating with OT coordinators and the central SOC to manage vulnerabilities and incidents.

The role demands experience in information security, ISMS/ISO 27001 exposure, and willingness to travel. You will contribute to secure OT networks, awareness training, and continuous policy improvements across

Qualifications

• Solid understanding of IT/OT environments and familiarity with technical and organizational processes.
• Initial professional experience in information security, ideally with exposure to ISMS, ISO 27001, NIS2, and BSI IT-Grundschutz.
• Experience with document management and structured document control.
• Willingness to travel regularly.

Responsibilities

• Further develop and maintain the Information Security Management System (ISMS), coordinating ISO 27001 Ready across all sites.
• Provide advisory and operational support for TISAX assessments and audits; ensure compliance evidence is provided.
• Serve as a key contact for IT/OT security and coordinate with local OT coordinators; support reporting.
• Support planning, design, and documentation of secure OT networks and access management with the I-O team.
• Organize and deliver IT/OT security awareness and training; monitor Mondi IT/OT Security Policy implementation.
• Coordinate IT/OT vulnerability management including reporting, KPI tracking, and risk assessments; support security incidents with the SOC.
• Develop security meetings and promote knowledge sharing across sites.

Skills

IT/OT environments

Information security

ISO 27001

NIS2

BSI IT-Grundschutz

Document management

Willing to travel

Job description

Mondi is seeking an IT/OT security specialist to strengthen the Information Security Management System (ISMS) and support TISAX and ISO 27001 initiatives. You will work across German sites, collaborating with OT coordinators and the central SOC to manage vulnerabilities and incidents.

The role demands experience in information security, ISMS/ISO 27001 exposure, and willingness to travel. You will contribute to secure OT networks, awareness training, and continuous policy improvements across