Sr. Cyber Security Engineer

This role requires a hybrid work schedule with in-office attendance in our Atlanta office Tuesday through Thursday, and remote work on Monday and Friday.

About the role

Reporting to the Manager, Cyber Security Engineering, the Senior Cyber Security Engineer is responsible for designing, implementing, supporting, and continually improving Graphic Packaging International's cybersecurity capabilities across both Information Technology (IT) and Operational Technology (OT) environments. This role serves as the Subject Matter Expert (SME) for Network Access Control (NAC), OT Security, Network Security Management, OT Visibility, and Remote Access Security, helping to ensure the protection, resilience, and availability of critical manufacturing and business operations.

The successful candidate will work closely with global IT teams, manufacturing facilities, managed service providers, vendors, and professional services partners to deliver secure and scalable cybersecurity solutions aligned with GPI's security strategy. The Senior Cyber Security Engineer will act as the primary cybersecurity subject matter expert for OT environments, driving technology deployments, vulnerability reduction, risk mitigation, security architecture improvements, and the adoption of industry best practices across GPI's global manufacturing footprint. This role will also support broader cybersecurity initiatives and cross-train across additional cybersecurity technologies and platforms.

Responsibilities

• Operational Technology (OT) Security
  • Lead the design, implementation, and operational support of OT cybersecurity controls across Paperboard Manufacturing and Converting facilities globally.
  • Serve as the primary OT Cybersecurity Subject Matter Expert (SME) for manufacturing environments supporting OT Engineers.
  • Collaborate with OT Engineers and business stakeholders to reduce cyber risk while maintaining operational reliability.
  • Support OT network segmentation initiatives and alignment with Purdue Model architecture principles.
  • Ensure secure integration between IT and OT environments.
• Network Access Control & Network Security
  • SME for engineering, administration, and optimization of Network Access Control (NAC) solutions across enterprise and manufacturing environments.
  • Drive NAC deployment, policy development, asset visibility, profiling, and compliance monitoring.
  • Oversee OT visibility platforms and security monitoring technologies to improve asset discovery, classification, and threat detection.
  • Design and implement secure remote access solutions for OT environments.
  • Support network security technologies including firewalls, segmentation platforms, secure access solutions, and network monitoring tools.
• Security Engineering & Architecture
  • Design, implement, and support complex cybersecurity technologies and solutions.
  • Provide security architecture recommendations for new technology initiatives and manufacturing projects.
  • Evaluate emerging cybersecurity technologies and provide recommendations aligned with business objectives and security strategy.
  • Drive automation and process improvements to increase operational efficiency and reduce risk.
  • Participate in cloud security initiatives and ensure secure deployment of cloud-enabled technologies.
  • Develop technical standards, implementation guides, and security engineering best practices.
• Governance, Compliance & Audit
  • Support internal and external audits and compliance activities.
  • Partner with Compliance, Internal Audit, and external vendors to maintain evidence required for SOX and regulatory audits.
  • Ensure adherence to relevant security and privacy regulations, standards, and industry frameworks.
  • Contribute to cybersecurity policies, standards, and governance processes.
  • Drive continuous improvement in cybersecurity controls and operational effectiveness.
• Vulnerability & Risk Management
  • Identify, assess, prioritize, and drive remediation of cyber security risks and vulnerabilities.
  • Develop mitigation strategies for OT and IT security exposures.
  • Collaborate with vulnerability management, infrastructure, and operations teams to improve security posture.
  • Support security assessments, risk reviews, penetration testing activities, and technology evaluations.
  • Assist Security Operations and Incident Response teams with root cause analysis and long-term risk reduction activities.
• Collaboration & Leadership
  • Partner with business, manufacturing, engineering, infrastructure, and application teams to provide cybersecurity consulting and guidance.
  • Work effectively with managed service providers and third-party partners to ensure delivery of security services and project outcomes.
  • Support a global operating model by working effectively across multiple regions and time zones.

Requirements

Education: Bachelor's Degree in Cyber Security, Information Security, Computer Science, Engineering, Information Technology, or related discipline, or equivalent practical experience.

Qualifications

Certifications (Preferred):

• CISSP (Certified Information Systems Security Professional)
• CompTIA Security+
• PMP (Project Management Professional) certification
• ITIL Foundation

Experience:

• 5+ years of experience in Cyber Security, Information Security, or Security Engineering roles.
• Experience supporting cybersecurity programs within global enterprise environments.
• Demonstrated experience securing industrial manufacturing or OT environments.
• Experience working with managed security service providers and external consulting organizations.
• Experience leading technical implementations and cybersecurity projects.
• Experience supporting incident response, risk management, and security operations activities.

Skills

Technical Skills:

Required Qualifications & Experience:

• Strong Experience In Several Of The Following Areas:
  • Operational Technology Security
    • Industrial Control Systems (ICS)
    • Manufacturing networks
    • OT visibility technologies
    • OT network segmentation
  • Network Security
    • Network Access Control
    • Firewalls and network segmentation
    • Secure remote access platforms
    • Network monitoring and traffic analysis
    • Zero Trust architecture
  • Security Technologies Awareness And Knowledge Of:
    • Endpoint Protection and EDR
    • SIEM and Security Monitoring
    • Email Security
    • Cloud Security Platforms

Personal Attributes:

• Strong analytical and problem-solving abilities.
• Excellent communication and stakeholder management skills.
• Ability to influence and engage technical and non-technical audiences.
• Self-motivated with a continuous improvement mindset.
• Comfortable working independently while collaborating across global teams.
• Able to manage multiple priorities within a complex and fast-paced environment.

Benefits

Graphic Packaging offers compensation and benefits programs that are among the industry’s best to reward the talented people who make our company successful.

Pay

Pay Range: $97,200.00 - $129,600.00