Description:
The Senior Manager, Operational Technology (IT/OT) Security is accountable for defining and executing Donaldson’s global OT cybersecurity strategy across manufacturing, plant, distribution/warehouse, technical lab areas, and other industrial environments. This role partners closely with Global Operations, OT/Controls Engineering, Enterprise Architecture, and IT Security to protect safety‑, quality‑, and revenue‑critical OT systems (e.g., PLCs, HMIs, SCADA, historians, MES) while enabling reliable production and digital modernization. The role drives governance, architecture, detection and response, and risk management aligned to industrial control systems (ICS) and IIoT environments.
Qualified candidates must be able to work a hybrid schedule at our Bloomington, MN office.
Role Responsibilities
- Define and own Donaldson’s global OT security vision, strategy, and multi‑year roadmap aligned with enterprise cybersecurity and manufacturing objectives.
- Lead and mature a global OT security program covering asset visibility, network segmentation, vulnerability management, monitoring, and incident response.
- Establish OT security governance, policies, standards, and metrics aligned to NIST CSF, NIST 800‑82, and ISA/IEC 62443.
- Define and report executive‑level KPIs/KRIs demonstrating OT risk posture, resilience, and program maturity.
- Partner with plant leaders, lab, and engineering teams to implement practical, uptime‑preserving security controls (Purdue model segmentation, secure remote access, allow‑listing, backup and recovery).
- Plan and direct all life cycle management activities, including designing and executing comprehensive maintenance programs.
- Oversee deployment and operations of OT visibility and monitoring solutions integrated with the enterprise SOC.
- Drive OT vulnerability and patch management using risk‑based prioritization and compensating controls appropriate for industrial environments.
- Lead OT incident response planning, exercises, and real‑world events in coordination with Operations, EHS, Quality, Legal, and OEMs.
- Manage third‑party and OEM OT cyber risk, including remote support, vendor access, and contract security requirements.
- Conduct technology refreshes (hardware and software) to mitigate obsolescence and ensure systems comply with modern standards.
- Provide secure‑by‑design guidance for new plants, production lines, and modernization initiatives, including IIoT and cloud integrations.
- Own OT security budget, vendor strategy, and global systems integrator relationships.
- Develop OT security awareness and training for engineers, technicians, plant leadership and employees.
- Ensure compliance with regulatory frameworks
TRAVEL: Up to 30%
Minimum Qualifications
- 10+ years of cybersecurity experience
- 5+ years of experience focused on OT/ICS security in manufacturing or industrial environments.
Preferred Qualifications
- Bachelor’s degree in Engineering, Computer Science, Cybersecurity, or related field; Master’s degree preferred.
- Relevant certifications preferred (GICSP, GRID, CISSP, CISM, IEC 62443).
- Proven success leading global, cross‑functional OT security initiatives across multiple manufacturing sites.