Sr. Operational Technology (OT/ICS) Security Architect

Owens Corning; Toledo (OH); On-site; USD 130,000 - 190,000; Full time

Job summary

Owens Corning is seeking a Sr. OT Security Architect to define and govern OT security across global manufacturing sites, with a focus on secure design, defense in depth, and standards alignment.

You will lead OT security operations, risk assessments, incident response, and vulnerability management, partnering with Manufacturing, Infrastructure, and external providers to maintain safety, reliability, and continuity of operations.

Qualifications

• Bachelor's degree in cybersecurity, CS, IS, IT, engineering, or related field.
• 7+ years in cybersecurity, security architecture, or network security.
• 3+ years supporting OT/ICS, manufacturing, or cyber-physical environments.

Responsibilities

• Define, implement, and govern global OT security architecture and standards.
• Lead OT vulnerability management, patching, and lifecycle.
• Coordinate incident response and cyber risk management for OT.
• Govern firewall architectures, policy management, and access controls.

Skills

OT/ICS security

Security architecture

Cybersecurity

Vulnerability management

Incident response

Education

Bachelor's degree in cybersecurity or related field

Job description

Select how often (in days) to receive an alert:

Sr. Operational Technology (OT/ICS) Security Architect

Location(s): Toledo, OH, US, 43659-0001 Tampa, FL, US, 33605 Granville, OH, US, 43023-1200

Function: Information Technology

Audience: Experienced Professional

Work Arrangement: On Site

Requisition ID: 70646

PURPOSE OF THE JOB

The Sr. OT Security Architect is a key member of the Owens Corning Global Information Services (GIS) Security organization. This role is responsible for defining, implementing, and governing Operational Technology (OT) security architecture, security operations capabilities, and cybersecurity standards across Owens Corning's global manufacturing environments.

The role serves as the technical leader for OT cybersecurity initiatives, ensuring secure design principles, defense-in-depth strategies, and consistent security controls are deployed across manufacturing sites. Key accountabilities include building and maturing OT Security Operations capabilities, developing OT security standards, governing firewall architecture and policy management, and driving vulnerability management, patching, and remediation programs.

This position partners with Manufacturing, Engineering, Infrastructure, Cybersecurity, the IT Security Operations Center, site teams, and external service providers to identify and mitigate cyber risk while maintaining reliability, availability, safety, and continuity of manufacturing operations. The role also provides oversight of OT monitoring, incident response and recovery, technology lifecycle management, and monthly security metrics and dashboards.

Reports to: Director, Manufacturing Security & Infrastructure

Span of Control: Individual Contributor; will coordinate work of third-party resources

JOB RESPONSIBILITIES

Knowing Our Businesses and their Strategies

• Understand the strategic direction of the company's businesses and execute technical strategies to enhance business results
• Develop and maintain a strong understanding of Owens Corning specific business processes and operations locally and globally
• Build relationships within the organization, cross-functionally, and with key business stakeholders; continuously enhance connection to remain aligned with core objectives
• Understand how IT/OT Security and services are directly aligned with the company's strategic objectives by regularly engaging with key business stakeholders
• Know what best‑in‑class IT organizations do and obtain outside‑in market insights to understand and then apply to positively impact Owens Corning.

Executing Strategy

OT Security Architecture and Governance

• Define, maintain, and govern global OT security architecture standards, patterns, reference designs, and technical requirements.
• Maintain secure design principles aligned with the Purdue Model, defense in depth, least privilege, ISA/IEC 62443, NIST guidance, and applicable industry practices.
• With oversight, will develop and maintain OT security standards, procedures, roadmaps, technical specifications, implementation guidance, and architecture decision records.
• Perform security architecture reviews for manufacturing systems, network designs, segmentation, remote access, cloud integrations, digital manufacturing initiatives, and material technology changes.
• Provide technical leadership for global OT security initiatives and participate in risk reviews for new technologies, projects, acquisitions, integrations, and modernization efforts.
• Govern security exceptions, compensating controls, residual-risk documentation, and architecture acceptance decisions.

Vulnerability Management, Patching, and Lifecycle Management

• Lead the OT vulnerability management process from discovery through risk assessment, prioritization, remediation planning, exception management, validation, and closure.
• Prioritize vulnerabilities using asset criticality, exploitability, exposure, compensating controls, operational impact, vendor support, and maintenance-window constraints.
• Develop and govern OT patching standards, testing expectations, deployment controls, rollback plans, reporting, and exception processes for operating systems, applications, firmware, network devices, and security platforms.
• Coordinate vulnerability remediation with manufacturing sites, engineering, infrastructure teams, application owners, equipment vendors, and service partners; validate evidence and track residual risk.
• Define lifecycle‑management requirements for OT assets and develop strategies for legacy or unsupported technologies through segmentation, monitoring, hardening, replacement planning, and documented compensating controls.
• Identify systemic vulnerability and lifecycle trends and translate them into remediation initiatives, roadmap priorities, and measurable risk‑reduction plans.

Incident Response and Cyber Risk Management

• Partner with IT Security Operations, Incident Response, Infrastructure, Manufacturing, and site teams during cybersecurity incidents affecting OT environments.
• Serve as an OT security technical lead for incident analysis, containment, eradication, recovery, lessons learned, and control‑improvement of workstreams.
• Develop and maintain OT incident response and recovery playbooks, including roles, communications, evidence handling, site engagement, isolation options, restoration dependencies, and validation steps.
• Participate in cyber exercises, tabletop events, and recovery testing activities.
• Conduct risk assessments and threat evaluations and recommend practical mitigations that preserve manufacturing safety, reliability, and continuity.

Firewall Architecture and Security Controls

• Provide architecture oversight and governance for OT firewalls, segmentation strategies, remote access technologies, intrusion detection, security monitoring, and network security controls.
• Define and review firewall standards, policy requirements, zone strategies, allowed services, logging expectations, remote access, and segmentation designs.
• Participate in firewall‑rule reviews, recertification, exception approvals, policy‑lifecycle governance, and remediation overly broad, obsolete, or unnecessary access.
• Ensure firewall policies align with least‑privilege principles, approved OT architecture, and secure manufacturing operations.
• Evaluate security technologies and recommend scalable enhancements that improve OT visibility, resilience, and cyber‑risk reduction.

Influencing in the Function

• Identify areas of waste (process, time, etc.) and ideate and execute action plans to create productivity
• Lead or participate in special projects that support the long‑term strategic goals of the business and/or organization
• Identify opportunities to improve effectiveness, value, and perception of the function

Developing Talent

• Invest in personal growth and development, clearly focused on self-learning
• Always strive to elevate the capabilities of the team and GIS organization across the company, drive change management, and technology adoption

JOB REQUIREMENTS

MINIMUM QUALIFICATIONS:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Engineering, or a related discipline; equivalent relevant experience may be considered.
• 7+ years of progressive experience in cybersecurity, security architecture, network security, infrastructure security, or security engineering, including 3+ years supporting OT, IC‘S, manufacturing, or other cyber‑physical environments.

EXPERIENCE, KNOWLEDGE & ABILITIES:

• Strong experience with security architecture, network