Operational Technology (OT) Cybersecurity Analyst

WM (Waste Management); Bannockburn (IL); On-site; USD 87,000 - 107,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

Short-term disability

Stock purchase plan

401(k) matching

Paid vacation

Holidays

Personal days

Job summary

Waste Management (WM) seeks an OT cybersecurity professional to monitor events from endpoint clients, servers, and OT devices, and to act as the first responder to investigations using log management tools.

The role develops cybersecurity policies for OT environments, performs risk assessments, and leads incident response while collaborating with IT and OT teams to advance cybersecurity maturity and regulatory alignment.

Qualifications

• Knowledge of cybersecurity frameworks and assessments.
• Strong understanding of network security, firewalls, and intrusion detection/prevention systems.
• Proven experience in conducting risk assessments, risk management, and incident response.

Responsibilities

• System Hardening and Architecture: Provide guidance on secure system design, network segmentation, and other protective measures for OT environments; collaborate with IT teams for IT/OT integration.
• Cybersecurity Strategy and Policy Development: Develop, implement, and maintain cybersecurity policies, standards, and procedures for OT environments; align programs with NIST, IEC 62443 and other applicable frameworks.
• Risk Management and Assessment: Perform risk assessments for OT systems; prioritize cybersecurity investments based on risk analysis.
• Monitoring and Incident Response: Monitor OT systems for cybersecurity threats; lead investigations and responses to incidents.
• Training and Awareness: Conduct cybersecurity training and act as SME for OT cybersecurity practices.
• Compliance and Auditing: Ensure compliance with industry regulations; prepare for audits and assessments.
• Collaboration and Leadership: Drive timely delivery of projects; align efforts with operational needs; support roadmap for OT cybersecurity maturity.

Education

Bachelor's Degree in Computer Science, MIS, Business Administration or similar

Job description

I. Job Summary

Under general supervision, assumes responsibility for monitoring events generated by endpoint clients, servers, network devices, and security devices across the enterprise. Acts as first level responder to investigations of possible incidents using a log/event management tool.

II. Essential Duties and Responsibilities

• System Hardening and Architecture Provide guidance on secure system design, network segmentation, and other protective measures for OT environments. Collaborate with IT teams to ensure integration between IT and OT cybersecurity strategies.
• Cybersecurity Strategy and Policy Development Develop, implement, and maintain cybersecurity policies, standards, and procedures for OT environments. Align OT cybersecurity programs with organizational goals and compliance requirements, including NIST, IEC 62443, and other applicable frameworks.
• Risk Management and Assessment Perform risk assessments for OT systems, identifying vulnerabilities and recommending mitigation strategies. Collaborate with stakeholders to prioritize cybersecurity investments based on risk analysis.
• Monitoring and Incident Response Monitor OT systems for cybersecurity threats using specialized tools and techniques. Lead the investigation and response to cybersecurity incidents, minimizing impacts and ensuring prompt recovery.
• Training and Awareness Conduct cybersecurity training and awareness programs tailored to OT personnel. Act as a subject-matter expert (SME) for OT cybersecurity best practices.
• Compliance and Auditing Ensure compliance with industry regulations and standards related to OT cybersecurity. Prepare for and participate in cybersecurity audits and assessments.
• Collaboration and Leadership Drive timely delivery of projects and initiatives while providing regular updates to leadership. Work closely with engineering, operations, and IT teams to align cybersecurity efforts with operational needs. Assist leadership to implement a roadmap for OT Cybersecurity maturity, including technology assessments, gap analysis, and improvement plans.

III. Qualifications

1. A. Required Qualifications Bachelor's Degree in Computer Science, MIS, Business Administration or similar area of study, or in lieu of degree, High School Diploma or GED (accredited) and an additional four years of related experience 3 years of previous experience required. and
2. B. Preferred Qualifications Knowledge of cybersecurity frameworks and assessments Strong understanding of network security, firewalls, and intrusion detection/prevention systems Proven experience in conducting risk assessments, risk management, and incident response

IV. Physical Requirements

Listed below are key points regarding physical demands, physical and occupational risks, and the work environment of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job.

Pay

The expected base pay range for this position across the U.S. is $87,000 - $107,000 . This range represents a good faith estimate for this position. The specific salary offered to a successful candidate may be influenced by a variety of factors including the candidate's relevant experience, education, training, certifications, qualifications, and work location.

V. Benefits

At WM, each eligible employee receives a competitive total compensation package that includes medical, dental, vision, life insurance, and short-term disability. In addition, we offer a stock purchase plan, company matching on a 401(k), and more. Employees also receive paid vacation, holidays, and personal days. Please note that benefits may vary by site.