Cybersecurity Auditor - Network & Firewall Management and Operational Technology (OT)

Job Description Summary: The Coca-Cola Company is seeking a highly motivated Cybersecurity Auditor with a focus on Network & Firewall Management and Operational Technology (OT) to join the Internal Audit Team. This role is responsible for providing independent assurance and advisory services related to cybersecurity risks, controls, governance, and compliance, with a primary focus on network security, firewall management, and operational technology security. The position partners with business, technology, Information Security, Risk Management, and Compliance stakeholders to assess whether network security controls effectively protect organizational assets, support regulatory requirements, and align with enterprise risk objectives. The role also evaluates broader cybersecurity risks, including network segmentation, intrusion prevention, cloud network security, remote access security, third-party connectivity, operational technology environments, and cybersecurity governance. Experience in Artificial Intelligence governance, security, and risk management is considered a plus.

What You’ll Do for Us:

• Execute risk-based audits, advisory reviews, and assessments focused on network security, firewall management, operational technology environments, network segmentation, intrusion prevention, and related cybersecurity controls.
• Evaluate the design and operating effectiveness of controls that prevent, detect, and respond to unauthorized access across enterprise networks, cloud environments, OT networks, industrial control systems, and critical technology infrastructure.
• Assess the governance, administration, and security of enterprise firewalls, cloud-native network security services, network access controls, and related perimeter defense technologies.
• Review firewall rule management, network configuration management, and change management processes, including provisioning, approvals, implementation, monitoring, recertification, and decommissioning activities.
• Evaluate network architecture and segmentation strategies across corporate, cloud, operational technology, and vendor-connected environments to determine whether critical assets are appropriately isolated and protected.
• Assess controls supporting remote access solutions, VPN technologies, third-party connectivity, internet-facing systems, DMZ environments, identity-aware network controls, and Zero Trust architectures.
• Evaluate the effectiveness of security monitoring capabilities, including intrusion detection and prevention systems, network detection and response solutions, security event monitoring, logging, alerting, and threat detection processes.
• Assess security controls over network infrastructure and related technologies, including routers, switches, wireless networks, load balancers, cloud networking components, industrial network devices, and supporting management platforms.
• Review cybersecurity controls within operational technology environments, including industrial control systems, SCADA systems, manufacturing networks, facility technologies, and other critical infrastructure components.
• Evaluate controls supporting hybrid network environments, cloud networking services, network segmentation models, and Zero Trust security architectures.
• Review controls over internet-facing services, administrative network access, network service accounts, machine-to-machine communications, and vendor connectivity.
• Evaluate governance and security controls supporting cloud networking, APIs, infrastructure integrations, and interconnected enterprise environments.
• Assess segmentation controls, network zoning, access restriction mechanisms, and perimeter defense frameworks.
• Evaluate monitoring, logging, alerting, and detective controls designed to identify unauthorized network activity, anomalous traffic patterns, potential intrusions, and network security events.
• Utilize data analytics and technology-enabled audit techniques to analyze firewall rulesets, network configurations, traffic patterns, connectivity paths, security events, and anomalous network activity.
• Identify control deficiencies, emerging threats, cybersecurity risks, and opportunities to strengthen network security, OT security, infrastructure resilience, and protection of enterprise assets.
• Develop clear, practical, and risk-informed recommendations that enhance network security, perimeter defenses, OT security, infrastructure resilience, and overall cybersecurity maturity.
• Monitor emerging cybersecurity threats, vulnerabilities, attack techniques, and regulatory developments.
• Evaluate cybersecurity risks associated with digital transformation initiatives and evolving network architectures.
• Consider cybersecurity implications related to cloud adoption, software-defined networking, automation, and new technologies.
• Support audit coverage of Artificial Intelligence governance, AI-enabled business processes, and AI security risks when applicable.
• Identify technology and cybersecurity trends that may affect organizational risk exposure.
• Utilize data analytics and technology-enabled auditing techniques to enhance audit effectiveness.
• Analyze firewall rulesets, network traffic, security logs, threat intelligence data, and network activity to identify risk indicators.
• Leverage automation and analytical tools to improve audit efficiency and coverage.
• Build collaborative relationships with Information Security, Network Engineering, Infrastructure Teams, Risk Management, Compliance, and business leaders.
• Communicate audit observations and risk insights effectively to management.
• Assist in preparing audit reports, presentations, and executive communications.
• Support issue validation and remediation monitoring activities.

Position Details:

Location: Atlanta, Georgia

Travel: 30% domestic and international

Individual contributor role - no direct reports

Qualifications & Requirements:

• Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Information Technology, or a related field.
• Two to five years of experience in Cybersecurity, Information Security, Network Security, IT Audit, Cybersecurity Audit, Firewall Administration, Network Engineering, Operational Technology Security, or related disciplines.
• Understanding of cybersecurity principles, risks, controls, and governance practices.
• Knowledge of network security concepts and control frameworks.
• Understanding of:
• Network architecture and security principles
• Network segmentation and micro-segmentation
• Firewall administration and rule management
• Intrusion Detection and Prevention Systems
• Network Detection and Response solutions
• Virtual Private Networks
• Cloud network security
• Operational Technology, Industrial Control Systems, and SCADA security concepts
• Security monitoring, logging, and incident detection processes
• Strong analytical, problem-solving, and communication skills.

Preferred Qualifications:

• Experience auditing or administering network security technologies such as Palo Alto, Check Point, Cisco Firepower, Fortinet, Juniper, Zscaler, Claroty, or similar platforms.
• Experience auditing cloud network security environments such as Azure, Amazon Web Services, or Google Cloud.
• Experience assessing operational technology environments, industrial control systems, manufacturing technology, SCADA environments, or critical infrastructure security controls.
• Familiarity with the NIST Cybersecurity Framework, NIST 800-53, ISO 27001, COBIT, CIS Controls, or similar frameworks.
• Professional certifications such as:
• CISA
• CISSP
• CRISC
• Security+
• CISM
• CCNP Security

Nice to Have:

• Experience in Artificial Intelligence governance, AI risk management, and AI security concepts.
• Experience assessing controls related to AI development, deployment, or usage.
• Familiarity with AI governance frameworks, model risk considerations, and AI data protection controls.
• Experience leveraging AI-enabled tools for audit planning, testing, analytics, or reporting.

Other Skills: This position requires expertise or competency in the following cybersecurity and technology areas:

• Network Security
• Firewall Management
• Network Architecture
• Network Segmentation and Micro-Segmentation
• Cloud Network Security
• Operational Technology Security
• Industrial Control Systems Security
• SCADA Security
• Intrusion Detection and Prevention
• Network Detection and Response
• Zero Trust security concepts
• Security monitoring and logging
• Security governance
• Technology controls
• Data analytics

The position also requires expertise or competency in the following audit and risk areas:

• Risk-based auditing
• Internal controls
• Root cause analysis
• Issue identification and validation
• Regulatory compliance

The successful candidate combines strong cybersecurity expertise with deep knowledge of network security, firewall management, and operational technology security, leveraging risk insights, analytics, and emerging technology awareness to provide assurance over critical network, perimeter, and industrial control system security controls. The candidate must demonstrate curiosity, sound judgment, effective communication skills, and a commitment to protecting enterprise value through risk-informed assurance across modern enterprise, cloud, and operational technology environments.

What We Can Do for You:

• Commitment to Diversity: We are paving the way to create change in the industry and our leadership is committed to diversity, inclusion and belonging.
• Global Network: Expand your global network by developing, learning, and growing with our top talent and connections around the world.
• Agile Work Environment: We embrace agile, with leadership that believes in removing barriers, so you are empowered to innovate and discover new solutions to complex problems.

The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States. Skills: Artificial Intelligence (AI), Artificial Intelligence Technologies, Cloud Security, Cyber Risks, Cybersecurity, Cybersecurity Assessment, Cyber Threat Prevention, Information Systems, Information Technology Auditing, Infrastructure Administration, Internal Controls, Kali Linux, Microsoft Dynamics 365 ERP, Network Security, SAP Systems, Sarbanes-Oxley Act (SOX) Pay Range: United States: 124,600 - 148,200 USD Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered. Location(s): United States of America City/Cities: Atlanta Travel Required: 26% - 50% Relocation Provided: No Job Posting End Date: November 13, 2026 Our Purpose and Growth Culture: We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors – curious, empowered, inclusive and agile – and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola. We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.