Director, IT & OT Security Operations and Governance

Job Summary

The Director, IT/OT Security Operations & Governance leads day-to-day cybersecurity operations across enterprise IT and manufacturing operational technology (OT) environments while establishing governance, risk oversight, and measurable security performance. The role partners closely with IT, plant engineering/operations, and business leaders to reduce cyber risk, strengthen resilience, and ensure security controls, policies, and processes are consistently implemented without compromising safety, quality, or uptime.

Key Responsibilities

• Own and mature security monitoring, detection, response, and recovery processes across IT and OT; manage the MDR provider to ensure 24x7 coverage, defined playbooks/runbooks, clear escalation paths, and measurable outcomes aligned to risk and manufacturing operations.
• Lead and coordinate major incident response, including triage, containment, eradication, forensics engagement, executive communications, and post-incident lessons learned.
• Partner with plant/operations engineering to implement practical OT security controls (asset visibility, segmentation, remote access, patching strategy, and compensating controls) aligned to safety, uptime, and operational constraints.
• Govern vulnerability scanning, prioritization, and remediation for IT and OT; manage exception process, risk acceptance, and time-bound remediation plans.
• Establish and maintain security policies, standards, procedures, and control objectives; drive alignment to recognized frameworks (e.g., NIST CSF/800-53, ISO 27001) and OT guidance (e.g., IEC 62443) as applicable.
• Define, produce, and continuously improve operational and risk metrics (KPIs/KRIs) such as MTTD/MTTR, alert fidelity, patch/vulnerability SLAs, phishing performance, endpoint coverage, OT asset coverage, and control effectiveness; deliver dashboards and executive-ready reporting.
• Support internal audit and external assessments by coordinating evidence collection, facilitating walkthroughs, assisting with control testing, and tracking remediation plans to closure; maintain an audit-ready evidence repository for key controls.
• Maintain the security operations tool stack; drive use-case development, tuning, automation/orchestration, integrations, and lifecycle management to improve efficiency and outcomes.
• Collaborate on awareness and behavior-change initiatives; ensure operational teams understand procedures for reporting, response, and secure-by-design practices.
• Facilitate security risk decisions for operational constraints, maintain risk register inputs for SecOps/GRC domains, and ensure compensating controls and timelines are documented.

Required Education & Experience

• Bachelor's Degree
• 8-11 Years of Experience
• Field(s) of Expertise: Progressive experience in cybersecurity, including IT security operations and/or OT/ICS security

Preferred Education & Experience

• Master's degree
• 12-14 Years of Experience
• Licenses and Certifications: CISSP, CISM, CRISC, or equivalent. OT/ICS security certifications (e.g., GICSP, IEC 62443)

Span of Control

• Does this role manage Southwire team members: Yes
• Number of Direct Reports: 5-10

Travel

• Domestic - up to 25% of time

Physical Requirements

• Moving - 5% of time
• Standing - 5% of time
• Sitting - 90% of time

Working Conditions

• Office
• Plant/Warehouse Floor

Equipment

• Computer/Keyboard
• Safety Glasses
• Safety Shoes
• Safety Vest

Competencies

• Skills

Benefits We Offer:

• 401k with Matching
• Family and Individual Insurance Packages (Health, Life, Dental, and Vision)
• Paid Time Off & Paid Holidays
• Long & Short-Term Disability
• Supplemental Insurance Plans
• Employee Assistance Program
• Employee Referral Program
• Tuition Reimbursement Programs
• Advancement & Professional Growth opportunities
• Parental Leave
• & More

About the Role

Southwire Company, LLC is one of North America’s largest wire and cable producers. The company manufactures building wire and cable, utility products, metal-clad cable, portable and electronic cord products, OEM wire products and engineered products. Additionally, Southwire supplies assembled products, contractor equipment, electrical components, hand tools and jobsite power and lighting solutions. The company also offers digital solutions including contractor planning and utility grid resiliency as well as field services including cable testing, rejuvenation and replacement to support our customers as a value-add partner. We are proud to offer competitive compensation, employee benefits, tuition reimbursement and unlimited growth opportunities.

Qualifications

• Complies with all policies and standards
• Manages staff performance and development, coaching team members to achieve their full potential incontributing to the department's goals.

Skills

• Collaborates on awareness and behavior-change initiatives
• Ensures operational teams understand procedures for reporting, response, and secure-by-design practices
• Facilitates security risk decisions for operational constraints
• Manages staff performance and development
• Supports internal audit and external assessments
• Tracks remediation plans to closure
• Uses recognized frameworks (e.g., NIST CSF/800-53, ISO 27001) and OT guidance (e.g., IEC 62443)

Pay

Commensurate with experience

Schedule

Not specified

Benefits

Varies