Cyber Security Architect – Concord, NC

Role Overview

We are seeking a highly experienced, hands-on Cyber Security Architect to lead and execute our enterprise cyber security strategy across a complex hybrid environment. This role is a technical, execution-focused leadership position–not a people-manager role–responsible for leading and designing, implementing, and enforcing cyber security controls across corporate IT, operational technology (OT), cloud, and on-premise environments.

The ideal candidate brings deep experience in manufacturing environments, has operated across IT and OT networks, and is comfortable working directly with infrastructure, security tooling, and vendors. This role reports directly to the CIO and partners closely with Infrastructure, Applications, Manufacturing Operations, and external automation vendors.

This is an in person role at our location — 5 days a week.

Key Responsibilities

• Own and execute the enterprise cyber security program across corporate IT and OT environments.
• Define, implement, and enforce cyber security policies, standards, and best practices aligned to industry frameworks (e.g., NIST, CIS).
• Translate security strategy into practical, enforceable controls across cloud, on-premise, and manufacturing systems.
• Design, and maintain Identity, and Access Management policies, and controls.
• Maintain security toolsets, and continually improve detection & response capabilities.
• Act as the incident response lead, and work closely with IT teams to establish plans & playbooks.

Manufacturing & OT Security

• Partner with plant operations and engineering teams to secure industrial systems without disrupting production.
• Work directly with engineering teams, and OEM vendors to ensure OT architecture is compliant with Westrock security policies.
• Establish, and provide secure remote access methods for OEMs.

Governance, Risk & Compliance

• Own cyber risk assessments, penetration tests, mitigation plans, and remediation actions.
• Support audits, regulatory requirements, and internal control testing as needed.
• Develop and maintain security documentation, standards, and incident response procedures.
• Respond to risk assessments from external sources including vendors, customers, and partners.

• 5+ years of experience in Cyber Security
• 1+ years of hands-on experience with CrowdStrike Falcon
• 3+ years of cyber security experience in a manufacturing environment
• Proven experience securing both IT and OT networks
• Strong hands-on experience with:
• Endpoint security
• Network security
• Vulnerability management
• Incident response
• Security monitoring and logging
• Experience securing hybrid cloud and on-premise environments
• Strong working knowledge of Microsoft on-prem and Azure AD, VMware, and SQL Server environments
• Demonstrated ability to work with external parties to ensure compliance with organization security policy
• Deep understanding of cyber security frameworks, tools, policies, and best practices

Preferred Qualifications

• Experience securing industrial control systems (ICS) or plant-floor technologies
• Familiarity with NIST, CIS, or similar cyber security frameworks
• Experience working in regulated or audit-heavy environments
• Strong written and verbal communication skills, especially with technical and non-technical stakeholders

Leadership Expectations

• Operates as a leader while remaining deeply hands-on.
• Comfortable and excited being the primary cyber security authority for the organization.
• Able to influence without formal authority and drive compliance through expertise and credibility.
• Balances security rigor with operational realities in manufacturing environments.

Why This Role Matters

This role is critical to protecting a complex manufacturing enterprise where cyber security must coexist with uptime, safety, and operational efficiency. You will have direct visibility and impact across corporate IT, plant operations, cloud platforms, and data centers–serving as the trusted cyber security partner to the CIO and the business.