Senior Security Engineer OT - EMEA

About the role:

Barry Callebaut Digital (BC Digital) is on a mission to lead the digital revolution in the chocolate industry, and we're looking for an Senior Security Engineer OT (Operations Technology), dedicated to protecting Barry Callebaut's industrial environment, while focusing on maintaining robust defenses against cyber threats through network and endpoint security measures. Reporting to the Director of OT Security in the CISO team, you will monitor operational technology security and patch management for consistent performance, preventing software vulnerabilities across Barry Callebaut. In addition, you will act as an expert and communicate with our factories and operations teams in a very effective and easy-to-understand manner and incorporate strategic goals, (regulatory) requirements, external trends, and threats and risks that must be addressed into our controls and associated working processes, technologies, skills, and procedures.

Additionally:

• The role is accountable for the OT Security initiatives of his/her region – (Approx. 10-15 factories) from our global 65 factory footprint.
• Key stakeholders are global digital and security teams and plant and maintenance/engineering managers at our factories worldwide. 
• Might require up to 50% travel to factories in the respective region depending on the priorities and ongoing projects.

Key responsibilities:

• Develop, implement, and maintain a robust OT security architecture aligned with industry best practices and regulatory requirements.
• Conduct regular risk assessments, identify vulnerabilities, and implement mitigation strategies to protect critical OT infrastructure.
• Implement and manage network security controls (firewalls, intrusion detection/prevention systems) and endpoint security measures (antivirus, anti-malware) for OT systems.
• Oversee and optimize patch management processes to ensure the timely application of security updates across OT environments.
• Collaborate with SecOps and relevant teams during security breaches.
• Ensure adherence to security standards (e.g., NIST, IEC 62443), and support internal and external audits.
• Assist in development of documentation and delivering security awareness training programs for OT personnel (Plant, Maintenance and Engineering Managers, factory workers, OT Systems engineers and OT Champions) to foster a security-conscious culture.
• Work closely with operations teams, IT security, and other stakeholders to ensure effective collaboration and knowledge sharing.
• Research and evaluate emerging OT security technologies and solutions to enhance the security posture.
• Support the implementation of policies and systems to protect our OT environment
• Collaborate effectively with a globally operating team across multiple time zones to achieve shared goals and drive project success
   

About you:

• Degree in Engineering/IT/technology/Automation, infrastructure security, or a comparable field
• Minimum of 7 years of relevant working experience (working in an industrial automation (OT) environment).
• Advanced knowledge of industrial network security and the design and configuration of technologies such as Siemens and/or Rockwell automation is required.
• Knowledge of international standards for industrial cyber security (ISO27001, NIST, IEC62443) is highly appreciated.
• Proficient in English.
• Deep knowledge of industrial control systems, SCADA, PLC, DCS, and related technologies.
• Proficiency in network security concepts, protocols, and tools (firewalls, VPNs, intrusion detection/prevention systems).
• Experience with endpoint protection technologies (antivirus, anti-malware, EDR).
• Familiarity with industry standards and frameworks (NIST, IEC 62443, ISO 27001).
• Ability to conduct thorough risk assessments and develop effective mitigation strategies.
• Excellent communication and presentation skills to effectively engage with both technical and non-technical audiences.
• Strong analytical and problem-solving abilities to identify and address security challenges.
• Ability to collaborate on multiple projects simultaneously
• Commitment to staying up-to-date with the latest OT security trends and threats.
• Travel requirements: GlobaThe l role requires the ability and willingness to travel (up to 50%).

We offer:

• Employment on a regular basis in the sweetest company in the world.
• Annual bonus based on your work results.
• Lunch card to be used for groceries and restaurants.
• Private medical care in Lux Med (basic package fully financed by BC).
• Fit Profit sports card co-financed by BC.
• PPE: we care about your future, and we save money for your retirement.
• Cafeteria Program as a part of Social Fund.
• Group life insurance.
• Hybrid working model: min. 8 days in the office a month.
• As part of our work-life balance culture, we can start work between 7 am and 10 am.
• Free consultation with a lawyer once a quarter.
• Chocolate! Yes, surprising but we have chocolate in the office, for Christmas, BC’s Birthday, and many other occasions during the year.
• And if chocolate is still not enough, you can join one of our theme clubs, where together with other employees we develop our passions and interests.
• Daily delivery of fresh fruits and veggies to the office.
• You can purchase our sweet products with a special discount.
• Relax zone in the office and plenty of options to choose from: PlayStation 5, football table, pool table, Ping-Pong, library, table games, and massage chairs.
• Sport @work? Sure! We have treadmills and indoor exercise bikes with a laptop station.
• We like to party as much as we like chocolate! We have integration budgets we can use for team events.
• Forever Chocolate and Event Team: you can join them and have a real influence on social life in BC and CSR activities.