Cyber Security Analyst

OverviewThe Cyber Security Analyst will support the execution and continuous evolution of the organization’s enterprise cybersecurity strategy across Information Technology (IT) and Operational Technology (OT) environments, ensuring protection of critical assets, operational resilience, and alignment with defined business objectives, risk appetite, and internationally recognized cybersecurity standards.ResponsibilitiesKey ResponsibilitiesSupport and drive the implementation and operationalization of the enterprise cybersecurity strategy for IT and OT environments, ensuring alignment with established business priorities and corporate risk management objectives.Establish, maintain, and mature the cybersecurity governance model, including policies, standards, guidelines, and control frameworks for IT and OT.Oversee Privileged Access Management (PAM) strategy and governance, ensuring secure and effective use of platforms such as CyberArk.Drive OT security capabilities, including asset visibility, threat detection, and risk management through solutions such as Claroty.Coordinate cybersecurity risk assessments, posture evaluations, and remediation roadmaps across hybrid IT/OT environments.Lead and monitor strategic cybersecurity initiatives and programs, ensuring execution in line with approved plans and timelines.Act as a trusted advisor to executive leadership, translating cybersecurity risks and initiatives into clear business impact and decision support.Promote a strong cybersecurity culture and awareness across technical, operational, and corporate teams.QualificationsRequirementsEducationBachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.Master’s degree in Cybersecurity, Information Security, Risk Management, or similar (preferred).Experience7–10 years of progressive experience in cybersecurity or information security.Proven experience securing both IT and OT environments (industrial, critical infrastructure, or operational contexts).Demonstrated experience leading teams, programs, or enterprise‑level security initiatives.Technical KnowledgeCybersecurity frameworks and standards: ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls.IT/OT security architecture and risk management.CyberArk: Privileged Access Management, vaults, governance, and controls.Claroty or equivalent OT security platforms (asset visibility, monitoring, risk reduction).Incident response, security architecture, and risk‑based decision‑making.LanguagesEnglish: Native or fluent.Spanish: Advanced (able to lead technical and executive‑level discussions with global stakeholders).Desired CertificationsCISSP, CISM, CRISC.OT / Industrial cybersecurity certifications or CyberArk‑related certifications (preferred).Core CompetenciesStrategic leadership and influenceBusiness‑oriented risk mindsetExecutive‑level communicationAnalytical thinking and decision‑makingCross‑functional and multidisciplinary collaborationJob SummaryRequisition Number: 2026-2621# of Openings: 1Category: Information TechnologyRetirement Plan: RailroadClose Date: Apply early as this job may be removed or filled as soon as there are sufficient applicants.Union Position: No