Senior Manager, NAOU Engineer

Senior Manager, OT Cybersecurity – North America Operating Unit

The Senior Manager, OT Cybersecurity for the North America Operating Unit (NAOU) leads the protection of the industrial control systems and manufacturing technology that keep Coca-Cola production running across North America. This role partners with plant leadership, engineering, and IT to make sure the equipment that produces, packages, and moves Coca-Cola products is safe, reliable, and resilient against cyber threats.

Reporting to the OT Cybersecurity Director within the Manufacturing Security team, the Senior Manager leads a team of OT cybersecurity analysts and engineers responsible for protecting NAOU's plants and supporting facilities. The role translates the Company's manufacturing cybersecurity strategy into day-to-day execution in the field — covering risk assessments, controls, monitoring, incident response, and continuous improvement across NAOU sites.

• Lead execution of the Company's manufacturing cybersecurity strategy across NAOU, translating it into a clear, multi-year roadmap for the region.
• Apply industry standards and frameworks — NIST Cybersecurity Framework (including the Manufacturing Profile), NIST SP 800-82, and ISA/IEC 62443 — to NAOU plants and supporting facilities.
• Develop, implement, and maintain OT security policies, standards, and procedures tailored to manufacturing environments.
• Partner with the OT Cybersecurity Director and broader Manufacturing Security team to ensure consistency with global standards while adapting to NAOU's needs.

Risk Assessment & Controls

• Identify and assess cyber risks across NAOU's industrial control systems, including potential vulnerabilities in hardware, software, and network configurations.
• Provide technical and design recommendations to harden OT assets, networks, and remote access at NAOU sites.
• Use the Purdue Model and ISA/IEC 62443 zones and conduits to guide segmentation, secure architecture, and risk reduction.
• Ensure compliance with relevant regulations and standards applicable to NAOU operations.

Monitoring, Detection & Incident Response

• Oversee deployment, tuning, and day-to-day use of OT monitoring tools (e.g., Claroty, Microsoft Defender for IoT) across NAOU sites.
• Partner with the Security Operations Center and Incident Response teams to ensure OT alerts are triaged, investigated, and resolved with manufacturing context.
• Lead OT incident response readiness for NAOU, including playbooks, tabletop exercises, and coordination with plant leadership during real events.
• Drive measurable improvements in the Company's ability to identify, respond to, and recover from cyber threats at production sites.

Vulnerability & Asset Management

• Own the OT vulnerability management process for NAOU — scanning, prioritization, and remediation tracking — balancing risk reduction with manufacturing uptime and safety.
• Maintain accurate visibility of OT assets (PLCs, HMIs, SCADA, historians, network devices, thin clients, virtualization hosts) across NAOU sites.
• Drive secure baseline configurations and patch / change management practices for OT assets in partnership with engineering and operations.

Stakeholder Partnership & Awareness

• Work closely with IT security, plant engineering, operations, and supply chain partners to ensure cohesive cybersecurity practices across IT and OT.
• Engage NAOU plant leadership and site teams as a trusted advisor on OT cyber risk and controls.
• Educate employees, contractors, and partners about cybersecurity best practices specific to OT and manufacturing environments.
• Coordinate with Concentrate Product Supply, Flavor Manufacturing, and other Company manufacturing groups to share lessons and standards.

Reporting & Continuous Improvement

• Provide clear, executive-framed reporting to the OT Cybersecurity Director and senior NAOU leaders on OT cyber posture, key risks, and program progress.
• Continuously improve OT cybersecurity tools, processes, and metrics, including the visibility of the OT threat landscape through network monitoring.
• Support new plant projects, capital investments, and acquisitions with OT security requirements and design reviews.

People…