Principal - IT/OT Security Engineer

Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living.Our 155,000 team members innovate with purpose, providing customers with life’s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing—today and for generations to come.Job Purpose and ImpactThe Principal, IT/OT Security job leads the strategic design, implementation and improvement of cybersecurity protective technologies across enterprise and manufacturing environments. As a recognized subject matter authority in cyber engineering and technology operations, this job connects plant IT and operations stakeholders with global cybersecurity capabilities to maintain the security and integrity of IT and operational technology systems and networks. The role applies broad knowledge of identity and access management, governance, risk and compliance, and cloud security, with deep hands-on expertise in incident response, endpoint security, and network security. It balances cyber risk reduction with employee safety, product quality, production stability, legacy and end-of-support technology constraints, and original equipment manufacturer dependencies.Key AccountabilitiesCYBERSECURITY TECHNOLOGIES: Leads and creates the design, implementation and improvement of cybersecurity protective technologies across IT and manufacturing environments, including endpoint detection and response, network protections, secure remote access, cloud infrastructure controls, and identity and access controls.TECHNOLOGY MANAGEMENT: Leads endpoint detection and response, network segmentation and monitoring, partner and original equipment manufacturer connectivity, operations technologies, and internet of things security. Applies knowledge of industrial architectures and Purdue model layers to assess potential risks, identify systemic compliance gaps and root causes, and recommend practical improvements, including compensating controls and cost benefit analysis.COORDINATION WITH IT, PLANT OPERATIONS and OT OEMs: Leads coordination with global cybersecurity teams, business information security officers, plant IT leadership, plant IT managers, engineering, operations, and other cross functional teams including OT Technology OEMs on shared initiatives that improve cybersecurity while protecting safe, stable and reliable manufacturing operations.IT SERVICE MANAGEMENT INTERFACES: Advises the operation of information technology service management interfaces, including asset, change, configuration, problem and incident management. Ensures security changes in plant environments follow appropriate safety, quality, operational validation, maintenance window, and rollback requirements.RESEARCHES SECURITY NEEDS: Researches highly complex IT and operational technology security needs, including security requirements definition, architecture and systems analysis, and risk assessment. Evaluates the suitability of agents, patches, configuration changes, and other controls considering system criticality, end-of-support technology, vendor supportability, performance, and availability.SECURITY POLICIES AND RISK: Performs highly complex analysis and applies security policies, standards, and governance requirements to manufacturing environments. Partners with risk and control teams to document exceptions, define proportionate compensating controls, and support compliance with applicable industry and organizational standards.INCIDENT RESPONSE: Partners with CCO on complex incident response involving plant IT and operational technology, working hands-on with global incident response, endpoint, network, plant, engineering, and vendor teams. Coordinates containment, evidence preservation, recovery, and lessons learned while prioritizing employee safety, product quality, production continuity, and operational resilience.COLLABORATION: Influences to foster collaboration among global cybersecurity teams, business information security officers, plant IT and operations leaders, data privacy and risk partners, original equipment manufacturers, external experts, and other internal and external parties to enable effective cybersecurity protections and the delivery of business objectives.QualificationsMinimum requirement of 6 years of relevant work experience. Typically reflects 10 years or more of relevant experience.Compensation DataThe expected salary for this position is $150,000 - $220,000 per annum.  Compensation varies depending on a wide array of factors including but not limited to the specific location, certifications, education, and level of experience. The disclosed range estimate may be adjusted for any applicable geographic differential associated with the location at which the position may be filled. This position is eligible for a discretionary incentive award. The incentive award amount is dependent upon company performance and your personal performance.At Cargill we put people first.  As part of your overall rewards, we offer a comprehensive benefit program including medical and/or other benefits dependent on the position offered and hours worked. Visit: learn more (subject to certain collective bargaining agreements for Union positions) .Minnesota Sick and Safe Leave accruals of one hour for every 30 worked, up to 48 hours per calendar year unless otherwise provided by lawEqual Opportunity Employer, including Disability/Vet.At Cargill, we care about your safety and want your job search experience to be a positive one. Unfortunately, there are scams out there where individuals pretend to be Cargill recruiters to try to collect personal information or request payment. Please know that Cargill will never ask you for money during the hiring process, and in most cases, we only accept applications through our official careers site, with the exception of some roles in our production plants. If something doesn't feel right or you have questions, don't hesitate to contact us. To learn more, visit our Notice on Fraudulent Job Offers.