Senior Global IT Security Specialist - OTPosition of broad specialization, with main area focusing on Operational Technology (OT) with a strong foundation in IT and Cybersecurity. In this role employee will ensure continuous operating and management on OT and IT Security across GGH global environment. Person will be responsible for creating, implementing and maintaining of best practises for GGH. This role will closely cooperate with varius internal teams (OT, Infrastructure) and with business stakeholders. Also, role will be responsible for contact with external stakeholders (clients, vendors). On daily basis will be responsible globally for IT Security related work and support including security incidents response and handling, cooperation with MSSP team, work with Data Loss Prevention, Privilege Access Management, Vulnerability Management,  Security Awareness and other IT Security systems.Responsibilities:<ul><li>Lead and support the secure design, deployment, and lifecycle management of industrial control systems (ICS) and associated infrastructure across our global operations</li><li>Hands-on understanding of SCADA, PLC, DCS, HMI, and other OT technologies, combined with in-depth knowledge of IT network security, asset protection, and compliance frameworks</li><li>Preparation, verification, implementation and maintaining of global procedures regarding information security.</li><li>Preparation and verification of internal procedures regarding IT business continuity.</li><li>Responding to security incidents and analyzing the causes of these incidents.</li><li>Constructive resolution of detected IT security and IT business continuity problems, including proposing and implementing security mechanisms.</li><li>Maintaining, monitoring and improving information security management systems and IT business continuity in accordance with legal provisions, standards and the needs of the company.</li><li>Participation in work related to information security and business continuity globally for GGH companies around the world, including but not limited to proposing improvements and changes to current processes.</li><li>Information security project management. Making decisions related to the project, within the framework of the ordinance on the appointment of the Implementation Team.</li><li>Cooperation with business stakeholders globally. Performing ad-hoc analysis on key security business questions.</li><li>Cooperation with suppliers and vendors in the field of information security and IT business continuity.</li><li>Conducting internal controls of the functioning of systems and processes, IT security risk analysis and IT business continuity.</li><li>Escalation support for any solution issues that may exist.</li><li>Performing other duties entrusted by the supervisor, resulting from the tasks realized by the Company and teams.</li><li>Motivating and influencing people, changing attitudes and behaviours.</li></ul>Requirements:<ul><li>Hands-on experience with one or more OT-related security platforms such as Armis, Claroty, Dragos, Darktrace</li><li>Strong understanding of Endpoint &amp; Infrastructure Security in Operational Technology (OT) environments</li><li>Experience with Cloud Security, particularly within the Microsoft Azure and MS365 stack</li><li>Familiarity with key cybersecurity tools and practices, including:<ul><li>Data Loss Prevention (DLP)</li><li>Security Information and Event Management (SIEM)</li><li>Privileged Access Management (PAM)</li><li>Vulnerability Management (VM)</li><li>Security Awareness Training platforms (e.g., KnowBe4)</li></ul></li><li>Understanding of concepts of Purdue Model</li><li>Hands-on experience with SCADA, PLC, DCS, HMI</li><li>Analytical and problem-solving skills</li><li>Experience in designing, deploying, and maintaining industrial control system (ICS) components including PLCs, SCADA systems, DCS, HMIs, RTUs, and networked field devices</li><li>Supporting network segmentation between IT and OT zones (e.g., Level 0–5 Purdue Model)</li><li>OT hardware lifecycle management and interfacing with equipment vendors (e.g., Siemens, Rockwell, Schneider Electric)</li><li>Configuring and maintaining redundant, fault-tolerant systems to ensure uptime of critical operations</li><li>Ability to work in cross-functional teams, including remote and external resources</li><li>Effective communication with technical resources</li><li>Works with minimal guidance and recognizes when guidance is needed</li><li>Ability to understand and develop enterprise policy and technical standards, particularly regarding data loss protection and secure configuration</li><li>Willingness and ability to learn about data loss protection management, exploits, hacker techniques, and overall security operations.</li></ul>Additional Requirements:<ul><li>Possession of recognized IT Security certifications such as: CEH, CISSP, SCCP, CCSP, CompTIA Security+, OSCP, or equivalent</li><li>Solid understanding of industry standards and frameworks, including: ISA/IEC 62443, NIST Cybersecurity Framework, and other relevant OT/IT security guidelines.</li></ul>We offer:<ul><li>Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers.</li><li>Great professional growth opportunities.</li><li>Annual bonus.</li><li>Private medical care &amp; insurance plan for you to keep an eye on your health.</li><li>MyBenefit program.</li><li>Flexible and hybrid work arrangement: We offer a flexible hybrid work model – 2 days a week in the Krakow office, or fully remote if you're located elsewhere.</li><li>Parking space for all employees.</li><li>Comfortable working environment (library, relaxation area with a view of the Wawel castle and city center, casual dress code).</li></ul>.If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

<div class="org-about-module-wrapper org-about-module__card-spacing" tabindex="-1" data-artdeco-is-focused="true">
<div>
<div class="org-about-module__description">
<div id="ember58" class="ember-view organization-about-module__content-consistant-cards-description">We&rsquo;re CANPACK Group &ndash; 8,000 people around the world, with a common goal to push the boundaries of packaging and help our customers dream and deliver on a global scale. Our company began in Poland over 30 years ago, and since then we&rsquo;ve grown into a leading global manufacturer of beverage packaging. Every day, we produce millions of beverage cans, food tins, glass bottles and metal closures at our production sites located on five continents. We create impactful, sustainable solutions that do more &ndash; for brands, for businesses, for people and the planet. We achieve this through empowering every employee to make their mark by sharing ideas and solving problems together. Join us and be part of a collaborative culture that cares about its employees and respects the world around it. Join us and help us Create That Feeling. </div>
</div>
</div>
</div>

Senior Global IT Security Specialist

Senior Global IT Security Specialist - OTPosition of broad specialization, with main area focusing on Operational Technology (OT) with a strong foundation in IT and Cybersecurity. In this role employee will ensure continuous operating and management on OT and IT Security across GGH global environment. Person will be responsible for creating, implementing and maintaining of best practises for GGH. This role will closely cooperate with varius internal teams (OT, Infrastructure) and with business stakeholders. Also, role will be responsible for contact with external stakeholders (clients, vendors). On daily basis will be responsible globally for IT Security related work and support including security incidents response and handling, cooperation with MSSP team, work with Data Loss Prevention, Privilege Access Management, Vulnerability Management, &nbsp;Security Awareness and other IT Security systems.Responsibilities:<ul><li>Lead and support the secure design, deployment, and lifecycle management of industrial control systems (ICS) and associated infrastructure across our global operations</li><li>Hands-on understanding of SCADA, PLC, DCS, HMI, and other OT technologies, combined with in-depth knowledge of IT network security, asset protection, and compliance frameworks</li><li>Preparation, verification, implementation and maintaining of global procedures regarding information security.</li><li>Preparation and verification of internal procedures regarding IT business continuity.</li><li>Responding to security incidents and analyzing the causes of these incidents.</li><li>Constructive resolution of detected IT security and IT business continuity problems, including proposing and implementing security mechanisms.</li><li>Maintaining, monitoring and improving information security management systems and IT business continuity in accordance with legal provisions, standards and the needs of the company.</li><li>Participation in work related to information security and business continuity globally for GGH companies around the world, including but not limited to proposing improvements and changes to current processes.</li><li>Information security project management. Making decisions related to the project, within the framework of the ordinance on the appointment of the Implementation Team.</li><li>Cooperation with business stakeholders globally. Performing ad-hoc analysis on key security business questions.</li><li>Cooperation with suppliers and vendors in the field of information security and IT business continuity.</li><li>Conducting internal controls of the functioning of systems and processes, IT security risk analysis and IT business continuity.</li><li>Escalation support for any solution issues that may exist.</li><li>Performing other duties entrusted by the supervisor, resulting from the tasks realized by the Company and teams.</li><li>Motivating and influencing people, changing attitudes and behaviours.</li></ul>Requirements:<ul><li>Hands-on experience with one or more OT-related security platforms such as&nbsp;Armis, Claroty, Dragos, Darktrace</li><li>Strong understanding of&nbsp;Endpoint &amp; Infrastructure Security&nbsp;in Operational Technology (OT) environments</li><li>Experience with&nbsp;Cloud Security, particularly within the&nbsp;Microsoft Azure and MS365 stack</li><li>Familiarity with key cybersecurity tools and practices, including:<ul><li>Data Loss Prevention (DLP)</li><li>Security Information and Event Management (SIEM)</li><li>Privileged Access Management (PAM)</li><li>Vulnerability Management (VM)</li><li>Security Awareness Training platforms&nbsp;(e.g.,&nbsp;KnowBe4)</li></ul></li><li>Understanding of concepts of Purdue Model</li><li>Hands-on experience with SCADA, PLC, DCS, HMI</li><li>Analytical and problem-solving skills</li><li>Experience in designing, deploying, and maintaining industrial control system (ICS) components including PLCs, SCADA systems, DCS, HMIs, RTUs, and networked field devices</li><li>Supporting network segmentation between IT and OT zones (e.g., Level 0–5 Purdue Model)</li><li>OT hardware lifecycle management and interfacing with equipment vendors (e.g., Siemens, Rockwell, Schneider Electric)</li><li>Configuring and maintaining redundant, fault-tolerant systems to ensure uptime of critical operations</li><li>Ability to work in cross-functional teams, including remote and external resources</li><li>Effective communication with technical resources</li><li>Works with minimal guidance and recognizes when guidance is needed</li><li>Ability to understand and develop enterprise policy and technical standards, particularly regarding data loss protection and secure configuration</li><li>Willingness and ability to learn about data loss protection management, exploits, hacker techniques, and overall security operations.</li></ul>Additional Requirements:<ul><li>Possession of recognized IT Security certifications such as: CEH, CISSP, SCCP, CCSP, CompTIA Security+, OSCP, or equivalent</li><li>Solid understanding of industry standards and frameworks, including: ISA/IEC 62443,&nbsp;NIST Cybersecurity Framework, and other relevant OT/IT security guidelines.</li></ul>We offer:<ul><li>Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers.</li><li>Great professional growth opportunities.</li><li>Annual bonus.</li><li>Private medical care &amp; insurance plan for you to keep an eye on your health.</li><li>MyBenefit program.</li><li>Flexible and hybrid work arrangement: We offer a flexible hybrid work model – 2 days a week in the Krakow office, or fully remote if you're located elsewhere.</li><li>Parking space for all employees.</li><li>Comfortable working environment (library, relaxation area with a view of the Wawel castle and city center, casual dress code).</li></ul>.If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

Senior Global IT Security Specialist

About the Job

About the Company

CANPACK Recycling

Similar Jobs

Information Security Analyst

Information Security Analyst