Global IT Security Expert - OT Position of broad specialization. with main area focusing on Operational Technology (OT). In this role employee will lead and advance the strategic security operations and engineering related to OT security initiatives across GGH related with , ensuring robust protection of digital assets, infrastructure, and operational continuity. The Security Expert will drive innovation, influence global security posture, and serve as a key advisor on risk mitigation and complianceensure continuous operating and management on IT Security across GGH global environment.  This role will closely cooperate with varius internal teams (OT, Infrastructure) and with business stakeholders. Also, role will be responsible for contact with external stakeholders (clients, vendors). On daily basis will be also responsible globally for IT Security related work and support including security incidents response and handling, cooperation with MSSP team, work with Data Loss Prevention, Privilege Access Management, Vulnerability Management,  Security Awareness and other IT Security systems.Tasks:- Lead and support the secure design, deployment, and lifecycle management of industrial control systems (ICS) and associated infrastructure across our global operations - Hands-on understanding of SCADA, PLC, DCS, HMI, and other OT technologies, combined with in-depth knowledge of IT network security, asset protection, and compliance frameworks - Hands-on experience with one or more OT-related security platforms such as Armis, Claroty, Dragos, Darktrace - Understanding of concepts of Purdue Model and network segmentation between OT/IT zones (e.g., Level 0–5 Purdue Model) - Design and govern enterprise-wide security architecture integrating cutting-edge technologies (e.g., zero trust, AI-driven threat detection) to proactively mitigate risks across hybrid environments. - Lead global security transformation programs, aligning with executive leadership and regulatory bodies to ensure strategic resilience and compliance. - Drive threat intelligence operations, including predictive analytics, adversary simulation, and coordination to anticipate and neutralize emerging threats. - Establish and evolve governance frameworks for security and business continuity, embedding risk-based decision-making into enterprise processes. - Oversee incident response orchestration, ensuring rapid containment, root cause analysis, and executive-level reporting for high-impact events. - Mentor and develop security thinking across regional and global IT teams - Continuously assess and optimize security tooling and platforms, including local and cloud-native controls, ensuring scalability and performance. - Lead strategic vendor and partner engagements, driving innovation in third-party risk management and secure supply chain practices. - Champion enterprise-wide security awareness and behavioral change programs, influencing culture through targeted campaigns and executive engagement. - Represent the organization in external forums, including industry working groups, regulatory consultations, and cybersecurity alliances. - Conduct advanced risk modeling and scenario planning, integrating geopolitical, technological, and operational factors into business continuity strategies. - Serve as escalation point for complex or unresolved security issues, providing strategic guidance and technical oversight to resolution teams. - Initiate and lead internal audits and maturity assessments, benchmarking against global standards (e.g., ISO 27001, NIST CSF, MITRE ATT&amp;CK). - Perform other strategic duties as assigned, contributing to enterprise resilience, innovation, and competitive advantageInnovation in Operations: Proven ability to drive innovation in security operations by adopting disruptive technologies and evolving defense strategies.Qualfications:<ul><li>Master’s degree in IT-related field or Security</li><li>English level B2</li><li>5–10 years of relevant experience</li><li>Possession of recognized IT Security certifications such as: CEH, CISSP, SCCP, CCSP, CompTIA Security+, OSCP, or equivalent</li><li>Solid understanding of industry standards and frameworks, including: ISA/IEC 62443, NIST Cybersecurity Framework, and other relevant OT/IT security guidelines.</li></ul>Other qualifications:<ul><li>Understanding of concepts and hands-on experience for Endpoint &amp; Infrastructure security , Cloud security (Azure, MS365 stack), DLP, CASB, SIEM, PAM, VM, Security Awareness (KnowBe4)</li></ul>Competencies required:- Ability to strategically align global security programs with long-term enterprise risk and business growth objectives. - Demonstrated success in leading and scaling international security teams, influencing executive and cross-functional stakeholders. - Evaluating and mitigating multi-dimensional security risks, including geopolitical, supply chain, and emerging threat vectors. - Deep expertise in designing resilient security architectures, integrating threat intelligence, adversary simulation, and automated incident response.E46 - Proven ability to drive innovation in security operations, adopting disruptive technologies and evolving defense strategies. - Exceptional skill in translating complex security insights into actionable guidance for senior leadership and non-technical audiences. - Comprehensive understanding of global regulatory ecosystems, embedding compliance into enterprise-wide governance and operations. - Advanced capability to orchestrate cross-departmental and cross-border security implementations, ensuring consistency, scalability, and agility.We offer:<ul><li>Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers.</li><li>Great professional growth opportunities.</li><li>Annual bonus.</li><li>Private medical care &amp; insurance plan for you to keep an eye on your health.</li><li>MyBenefit program.</li><li>Flexible and hybrid work arrangement: We offer a flexible hybrid work model – 2 days a week in the Krakow office, or fully remote if you're located elsewhere.</li><li>Parking space for all employees.</li><li>Comfortable working environment (library, relaxation area with a view of the Wawel castle and city center, casual dress code</li></ul>If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

<div class="org-about-module-wrapper org-about-module__card-spacing" tabindex="-1" data-artdeco-is-focused="true">
<div>
<div class="org-about-module__description">
<div id="ember58" class="ember-view organization-about-module__content-consistant-cards-description">We&rsquo;re CANPACK Group &ndash; 8,000 people around the world, with a common goal to push the boundaries of packaging and help our customers dream and deliver on a global scale. Our company began in Poland over 30 years ago, and since then we&rsquo;ve grown into a leading global manufacturer of beverage packaging. Every day, we produce millions of beverage cans, food tins, glass bottles and metal closures at our production sites located on five continents. We create impactful, sustainable solutions that do more &ndash; for brands, for businesses, for people and the planet. We achieve this through empowering every employee to make their mark by sharing ideas and solving problems together. Join us and be part of a collaborative culture that cares about its employees and respects the world around it. Join us and help us Create That Feeling. </div>
</div>
</div>
</div>

Global IT Security Expert - OT

Global IT Security Expert - OT Position of broad specialization. with main area focusing on Operational Technology (OT). In this role employee will lead and advance the strategic security operations and engineering related to OT security initiatives across GGH related with , ensuring robust protection of digital assets, infrastructure, and operational continuity. The Security Expert will drive innovation, influence global security posture, and serve as a key advisor on risk mitigation and complianceensure continuous operating and management on IT Security across GGH global environment.&nbsp; This role will closely cooperate with varius internal teams (OT, Infrastructure) and with business stakeholders. Also, role will be responsible for contact with external stakeholders (clients, vendors). On daily basis will be also responsible globally for IT Security related work and support including security incidents response and handling, cooperation with MSSP team, work with Data Loss Prevention, Privilege Access Management, Vulnerability Management, &nbsp;Security Awareness and other IT Security systems.Tasks:- Lead and support the secure design, deployment, and lifecycle management of industrial control systems (ICS) and associated infrastructure across our global operations - Hands-on understanding of SCADA, PLC, DCS, HMI, and other OT technologies, combined with in-depth knowledge of IT network security, asset protection, and compliance frameworks - Hands-on experience with one or more OT-related security platforms such as Armis, Claroty, Dragos, Darktrace - Understanding of concepts of Purdue Model and network segmentation between OT/IT zones (e.g., Level 0–5 Purdue Model) - Design and govern enterprise-wide security architecture integrating cutting-edge technologies (e.g., zero trust, AI-driven threat detection) to proactively mitigate risks across hybrid environments. - Lead global security transformation programs, aligning with executive leadership and regulatory bodies to ensure strategic resilience and compliance. - Drive threat intelligence operations, including predictive analytics, adversary simulation, and coordination to anticipate and neutralize emerging threats. - Establish and evolve governance frameworks for security and business continuity, embedding risk-based decision-making into enterprise processes. - Oversee incident response orchestration, ensuring rapid containment, root cause analysis, and executive-level reporting for high-impact events. - Mentor and develop security thinking across regional and global IT teams - Continuously assess and optimize security tooling and platforms, including local and cloud-native controls, ensuring scalability and performance. - Lead strategic vendor and partner engagements, driving innovation in third-party risk management and secure supply chain practices. - Champion enterprise-wide security awareness and behavioral change programs, influencing culture through targeted campaigns and executive engagement. - Represent the organization in external forums, including industry working groups, regulatory consultations, and cybersecurity alliances. - Conduct advanced risk modeling and scenario planning, integrating geopolitical, technological, and operational factors into business continuity strategies. - Serve as escalation point for complex or unresolved security issues, providing strategic guidance and technical oversight to resolution teams. - Initiate and lead internal audits and maturity assessments, benchmarking against global standards (e.g., ISO 27001, NIST CSF, MITRE ATT&amp;CK). - Perform other strategic duties as assigned, contributing to enterprise resilience, innovation, and competitive advantageInnovation in Operations: Proven ability to drive innovation in security operations by adopting disruptive technologies and evolving defense strategies.Qualfications:<ul><li>Master’s degree in IT-related field or Security</li><li>English level B2</li><li>5–10 years of relevant experience</li><li>Possession of recognized IT Security certifications such as: CEH, CISSP, SCCP, CCSP, CompTIA Security+, OSCP, or equivalent</li><li>Solid understanding of industry standards and frameworks, including: ISA/IEC 62443, NIST Cybersecurity Framework, and other relevant OT/IT security guidelines.</li></ul>Other qualifications:<ul><li>Understanding of concepts and hands-on experience for Endpoint &amp; Infrastructure security , Cloud security (Azure, MS365 stack), DLP, CASB, SIEM, PAM, VM, Security Awareness (KnowBe4)</li></ul>Competencies required:- Ability to strategically align global security programs with long-term enterprise risk and business growth objectives. - Demonstrated success in leading and scaling international security teams, influencing executive and cross-functional stakeholders. - Evaluating and mitigating multi-dimensional security risks, including geopolitical, supply chain, and emerging threat vectors. - Deep expertise in designing resilient security architectures, integrating threat intelligence, adversary simulation, and automated incident response.E46 - Proven ability to drive innovation in security operations, adopting disruptive technologies and evolving defense strategies. - Exceptional skill in translating complex security insights into actionable guidance for senior leadership and non-technical audiences. - Comprehensive understanding of global regulatory ecosystems, embedding compliance into enterprise-wide governance and operations. - Advanced capability to orchestrate cross-departmental and cross-border security implementations, ensuring consistency, scalability, and agility.We offer:<ul><li>Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers.</li><li>Great professional growth opportunities.</li><li>Annual bonus.</li><li>Private medical care &amp; insurance plan for you to keep an eye on your health.</li><li>MyBenefit program.</li><li>Flexible and hybrid work arrangement: We offer a flexible hybrid work model – 2 days a week in the Krakow office, or fully remote if you're located elsewhere.</li><li>Parking space for all employees.</li><li>Comfortable working environment (library, relaxation area with a view of the Wawel castle and city center, casual dress code</li></ul>If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

Global IT Security Expert - OT

About the Job

About the Company

CANPACK Recycling

Similar Jobs

Cyber Incident Response Lead

Cyber Incident Response Lead

Global IT Security Expert - OT

Global IT Security Expert - OT

Global IT Security Expert _ IAM

Global IT Security Expert _ IAM

Information Security Officer

Information Security Officer

Network & Security Engineer

Network & Security Engineer

Global IT Security Expert - IAM

Global IT Security Expert - IAM

Global IT Security Expert - IAM

Global IT Security Expert - IAM

Information Security Analyst

Information Security Analyst

Security Engineer

Security Engineer

Information Security Analyst

Information Security Analyst