Principal - IT/OT Security Engineer at Cargill in Wayzata, MN

Job description

Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living. Our 155,000 team members innovate with purpose, providing customers with life’s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing—today and for generations to come. Job Purpose and Impact The Principal, IT/OT Security job leads the strategic design, implementation and improvement of cybersecurity protective technologies across enterprise and manufacturing environments. As a recognized subject matter authority in cyber engineering and technology operations, this job connects plant IT and operations stakeholders with global cybersecurity capabilities to maintain the security and integrity of IT and operational technology systems and networks. The role applies broad knowledge of identity and access management, governance, risk and compliance, and cloud security, with deep hands-on expertise in incident response, endpoint security, and network security. It balances cyber risk reduction with employee safety, product quality, production stability, legacy and end-of-support technology constraints, and original equipment manufacturer dependencies. Key Accountabilities CYBERSECURITY TECHNOLOGIES: Leads and creates the design, implementation and improvement of cybersecurity protective technologies across IT and manufacturing environments, including endpoint detection and response, network protections, secure remote access, cloud infrastructure controls, and identity and access controls. TECHNOLOGY MANAGEMENT: Leads endpoint detection and response, network segmentation and monitoring, partner and original equipment manufacturer connectivity, operations technologies, and internet of things security. Applies knowledge of industrial architectures and Purdue model layers to assess potential risks, identify systemic compliance gaps and root causes, and recommend practical improvements, including compensating controls and cost benefit analysis. COORDINATION WITH IT, PLANT OPERATIONS and OT OEMs: Leads coordination with global cybersecurity teams, business information security officers, plant IT leadership, plant IT managers, engineering, operations, and other cross functional teams including OT Technology OEMs on shared initiatives that improve cybersecurity while protecting safe, stable and reliable manufacturing operations. IT SERVICE MANAGEMENT INTERFACES: Advises the operation of information technology service management interfaces, including asset, change, configuration, problem and incident management. Ensures security changes in plant environments follow appropriate safety, quality, operational validation, maintenance window, and rollback requirements. RESEARCHES SECURITY NEEDS: Researches highly complex IT and operational technology security needs, including security requirements definition, architecture and systems analysis, and risk assessment. Evaluates the suitability of agents, patches, configuration changes, and other controls considering system criticality, end-of-support technology, vendor supportability, performance, and availability. SECURITY POLICIES AND RISK: Performs highly complex analysis and applies security policies, standards, and governance requirements to manufacturing environments. Partners with risk and control teams to document exceptions, define proportionate compensating controls, and support compliance with applicable industry and organizational standards. INCIDENT RESPONSE: Partners with CCO on complex incident response involving plant IT and operational technology, working hands-on with global incident response, endpoint, network, plant, enginee