Who we are:  We're transforming one of the world’s oldest industries with cutting-edge technology and an innovative approach. Backed by top-tier investors and recognized by Time as one of the "best Inventions of 2024" and Fast Company as one of 2024's "Next Big Things in Tech", Electra is scaling rapidly and we're looking for bold, driven individuals to help us reshape the future of iron production. If you're ready to make a real impact in a company that's redefining heavy industry for a cleaner, smarter world, we want to hear from you.What you will do:  The Senior IT Data Security &amp; OT Risk Engineer is a senior-level individual contributor responsible for safeguarding Electra’s information and operational technology assets worldwide. This role leads security engineering initiatives, risk management programs, and compliance adoption across IT and OT environments.    Beyond technical execution, this position also plays a critical role in the development of IT security policies, standards, and guidelines in partnership with leadership. Acting as a subject matter expert, the engineer helps shape Electra’s security strategy, ensuring policies are practical, compliant with international regulations, and aligned with business objectives. Responsibilities include: <ul><li>Lead the design, implementation, and governance of IT/OT security frameworks across enterprise and industrial systems</li><li>Collaborate with the Director of IT and leadership team to develop, update, and enforce IT security policies, standards, and procedures</li><li>Ensure that policies align with NIST CSF 2.0, ISO/IEC 27001, IEC 62443, and global regulatory frameworks (e.g., GDPR, NIS Directive, CCPA)</li><li>Partner with the Staff Network Administrator to embed policy-driven controls into network segmentation, access, and firewall strategies</li><li>Conduct risk assessments, threat modeling, and penetration testing, translating findings into updated policy and governance requirements</li><li>Develop incident response and escalation policies; ensure playbooks are current and aligned with business continuity goals</li><li>Monitor compliance with policies across global teams; recommend corrective actions when gaps are identified</li><li>Mentor IT staff on both technical and governance aspects of data security and risk</li><li>Communicate policy changes and risk posture updates to leadership, ensuring executive alignment and informed decision-making</li><li>Stay current with emerging threats, regulations, and industry standards; proactively recommend policy adjustments to maintain Electra’s resilience</li></ul> What we need you to bring to the team:   <ul><li>Bachelor’s degree in Cybersecurity, Computer Science, or related field</li><li>Professional certifications such as CISSP, CISM, CISA, CCSP, or IEC 62443 are strongly preferred</li><li>8+ years of experience in IT security with at least 3 years in OT or ICS environments (excluding internships, co-ops, and other school projects)</li><li>Proven experience developing and implementing security policies, governance frameworks, and risk management strategies in collaboration with IT leadership</li><li>Expertise in ISO 27001, NIST CSF, IEC 62443, and regulatory compliance requirements, including GDPR, NIS Directive, and SOC 2</li><li>Strong technical background with hands-on expertise in SIEM, EDR, IAM, DLP, firewalls, IDS/IPS, and cloud security platforms</li><li>Ability to translate complex risk findings into actionable policies and standards understood by both technical and business stakeholders</li><li>Excellent communication, collaboration, and influence skills with the ability to work closely with senior leadership and cross-functional teams</li><li>Applies advanced professional knowledge, business acumen, and company objectives to develop and resolve complex technical and governance challenges</li><li>Provides creative and effective solutions to highly complex issues requiring in-depth evaluation of multiple variables</li><li>Directs the application of established security principles while guiding the development of new policies, standards, and practices</li><li>Understands interrelationships across disciplines and works effectively on complex, cross-functional initiatives</li><li>Exercises judgment in selecting and adapting methods, techniques, and evaluation criteria to achieve departmental and organizational objectives</li><li>Builds and maintains networks with key contacts outside of direct expertise and leverages influence across the business</li><li>Adapts communication style and uses persuasion to deliver messages that align with enterprise-wide security and business goals</li><li>Frequently advises others on complex cybersecurity and governance matters and may lead teams accountable for delivering tactical business targets</li></ul> <div><div>What we want you to bring to the team:   <ul><li>Bachelor’s degree in Cybersecurity, Computer Science, or related field</li><li>10+ years of experience in IT security with at least 3 years in OT or ICS environments</li><li>Experience in international manufacturing or energy sectors with multi-country compliance requirements</li><li>Familiarity with Microsoft security stack, including Sentinel, Defender, Entra, and Purview</li><li>Exposure to policy-driven OT risk governance and industrial cybersecurity maturity models</li><li>Ability to work on significant and unique issues requiring evaluation of complex or intangible factors</li><li>Strong conceptual thinking skills to understand advanced issues and implications in cybersecurity and compliance</li><li>Exercises independent judgment in determining methods, techniques, and evaluation criteria to achieve results</li><li>Accountable for results that may impact the entire IT security function and business operations</li></ul>Compensation:   <ul><li>The anticipated starting pay range for this position is $100,000-$127,000 and may be more or less depending upon skills, experience, and education.  </li></ul> Benefits For You:  <ul><li>100% paid premiums across all medical, dental, vision, telemedicine, short-term disability, long-term disability, and basic life insurance plans </li><li>Reasonable use PTO </li><li>$1,800 in annual employer HSA contributions (health savings account) </li></ul>Benefits For Your Family:  <ul><li>100% paid premiums across all medical, dental, vision, and telemedicine plans </li><li>12 weeks of paid parental leave </li></ul>Benefits For Your Future:  <ul><li>401k with up to 5% matching contributions which vest 100% on day one  </li><li>Eligibility for incentive stock options </li></ul> If you need an accommodation during the application or interview process, reach out to us at <a href="mailto:careers@electra.com">careers@electra.com</a>—we’re here to help.</div></div>

Electra is decarbonizing iron and steelmaking to eliminate 3.7 gigatons or 10% of global carbon dioxide emissions. Leveraging proven industrial-scale electrochemical and hydrometallurgical processes, and backed by leading sustainability-focused venture capitalists, our team is developing lower cost, scalable solutions utilizing renewable energy to forge a cleaner, greener future for the trillion-dollar steel industry. With a uniquely collaborative culture, endless passion for developing disruptive technologies, and the opportunity to revolutionize carbon-intensive manufacturing industries, careers at Electra offer challenge, reward, and the chance to bring to market solutions that dramatically improve the health of the planet.

Senior IT Data Security & OT Risk Engineer

Who we are:&nbsp;&nbsp;We're transforming one of the world’s oldest industries with cutting-edge technology and an innovative approach. Backed by top-tier investors and recognized by Time as one of the "best Inventions of 2024" and Fast Company as one of 2024's "Next Big Things in Tech", Electra is scaling rapidly and we're looking for bold, driven individuals to help us reshape the future of iron production. If you're ready to make a real impact in a company that's redefining heavy industry for a cleaner, smarter world, we want to hear from you.What you will do: &nbsp;The Senior IT Data Security &amp; OT Risk Engineer is a senior-level individual contributor responsible for safeguarding Electra’s information and operational technology assets worldwide. This role leads security engineering initiatives, risk management programs, and compliance adoption across IT and OT environments.&nbsp; &nbsp; Beyond technical execution, this position also plays a critical role in the development of IT security policies, standards, and guidelines in partnership with leadership. Acting as a subject matter expert, the engineer helps shape Electra’s security strategy, ensuring policies are practical, compliant with international regulations, and aligned with business objectives.&nbsp;Responsibilities include:&nbsp;<ul><li>Lead the design, implementation, and governance of IT/OT security frameworks across enterprise and industrial systems</li><li>Collaborate with the Director of IT and leadership team to develop, update, and enforce IT security policies, standards, and procedures</li><li>Ensure that policies align with NIST CSF 2.0, ISO/IEC 27001, IEC 62443, and global regulatory frameworks (e.g., GDPR, NIS Directive, CCPA)</li><li>Partner with the Staff Network Administrator to embed policy-driven controls into network segmentation, access, and firewall strategies</li><li>Conduct risk assessments, threat modeling, and penetration testing, translating findings into updated policy and governance requirements</li><li>Develop incident response and escalation policies; ensure playbooks are current and aligned with business continuity goals</li><li>Monitor compliance with policies across global teams; recommend corrective actions when gaps are identified</li><li>Mentor IT staff on both technical and governance aspects of data security and risk</li><li>Communicate policy changes and risk posture updates to leadership, ensuring executive alignment and informed decision-making</li><li>Stay current with emerging threats, regulations, and industry standards; proactively recommend policy adjustments to maintain Electra’s resilience</li></ul>&nbsp;What we need you to bring to the team:&nbsp; &nbsp;<ul><li>Bachelor’s degree in Cybersecurity, Computer Science, or related field</li><li>Professional certifications such as CISSP, CISM, CISA, CCSP, or IEC 62443 are strongly preferred</li><li>8+ years of experience in IT security with at least 3 years in OT or ICS environments (excluding internships, co-ops, and other school projects)</li><li>Proven experience developing and implementing security policies, governance frameworks, and risk management strategies in collaboration with IT leadership</li><li>Expertise in ISO 27001, NIST CSF, IEC 62443, and regulatory compliance requirements, including GDPR, NIS Directive, and SOC 2</li><li>Strong technical background with hands-on expertise in SIEM, EDR, IAM, DLP, firewalls, IDS/IPS, and cloud security platforms</li><li>Ability to translate complex risk findings into actionable policies and standards understood by both technical and business stakeholders</li><li>Excellent communication, collaboration, and influence skills with the ability to work closely with senior leadership and cross-functional teams</li><li>Applies advanced professional knowledge, business acumen, and company objectives to develop and resolve complex technical and governance challenges</li><li>Provides creative and effective solutions to highly complex issues requiring in-depth evaluation of multiple variables</li><li>Directs the application of established security principles while guiding the development of new policies, standards, and practices</li><li>Understands interrelationships across disciplines and works effectively on complex, cross-functional initiatives</li><li>Exercises judgment in selecting and adapting methods, techniques, and evaluation criteria to achieve departmental and organizational objectives</li><li>Builds and maintains networks with key contacts outside of direct expertise and leverages influence across the business</li><li>Adapts communication style and uses persuasion to deliver messages that align with enterprise-wide security and business goals</li><li>Frequently advises others on complex cybersecurity and governance matters and may lead teams accountable for delivering tactical business targets</li></ul>&nbsp;<div><div>What we want you to bring to the team:&nbsp; &nbsp;<ul><li>Bachelor’s degree in Cybersecurity, Computer Science, or related field</li><li>10+ years of experience in IT security with at least 3 years in OT or ICS environments</li><li>Experience in international manufacturing or energy sectors with multi-country compliance requirements</li><li>Familiarity with Microsoft security stack, including Sentinel, Defender, Entra, and Purview</li><li>Exposure to policy-driven OT risk governance and industrial cybersecurity maturity models</li><li>Ability to work on significant and unique issues requiring evaluation of complex or intangible factors</li><li>Strong conceptual thinking skills to understand advanced issues and implications in cybersecurity and compliance</li><li>Exercises independent judgment in determining methods, techniques, and evaluation criteria to achieve results</li><li>Accountable for results that may impact the entire IT security function and business operations</li></ul>Compensation:&nbsp;&nbsp;&nbsp;<ul><li>The anticipated starting pay range for this position is $100,000-$127,000 and may be more or less depending upon skills, experience, and education. &nbsp;</li></ul>&nbsp;Benefits For You: &nbsp;<ul><li>100% paid premiums across all medical, dental, vision, telemedicine, short-term disability, long-term disability, and basic life insurance plans&nbsp;</li><li>Reasonable use PTO&nbsp;</li><li>$1,800 in annual employer HSA contributions&nbsp;(health savings account)&nbsp;</li></ul>Benefits For Your Family:&nbsp;&nbsp;<ul><li>100% paid premiums across all medical, dental, vision, and telemedicine plans&nbsp;</li><li>12 weeks of paid parental leave&nbsp;</li></ul>Benefits For Your Future: &nbsp;<ul><li>401k with up to 5% matching contributions which vest 100% on day one&nbsp;&nbsp;</li><li>Eligibility for incentive stock options&nbsp;</li></ul>&nbsp;If you need an accommodation during the application or interview process, reach out to us at&nbsp;<a href="mailto:careers@electra.com">careers@electra.com</a>—we’re here to help.</div></div>&nbsp;

Senior IT Data Security & OT Risk Engineer

About the Job

About the Company

Electra

Similar Jobs

Staff Program Manager, Information Security

Staff Program Manager, Information Security

Information Security Engineer

Information Security Engineer

Cyber Security Engineer III (ICS/OT)

Cyber Security Engineer III (ICS/OT)

Director, Cybersecurity Architecture

Director, Cybersecurity Architecture

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Cyber Operations Analyst

Senior Cyber Operations Analyst

Senior Security Engineer

Senior Security Engineer

Microsoft Security Engineer

Microsoft Security Engineer

Manager - Cyber Security

Manager - Cyber Security