Cybersecurity Auditor – Network & Firewall Management and Operational Technology; OT

Position: Cybersecurity Auditor – Network & Firewall Management and Operational Technology (OT)
## Cybersecurity Auditor – Network & Firewall Management and Operational Technology (OT)
Apply:
US - GA - Atlanta:
Full time:
Posted Today:
R-147836
** Job Description

Summary:

** The Coca-Cola Company is seeking a highly motivated Cybersecurity Auditor with a focus on Network & Firewall Management and Operational Technology (OT) to join the Internal Audit Team. This role is responsible for providing independent assurance and advisory services related to cybersecurity risks, controls, governance, and compliance, with a primary focus on network security, firewall management, and operational technology security.

The position partners with business, technology, Information Security, Risk Management, and Compliance stakeholders to assess whether network security controls effectively protect organizational assets, support regulatory requirements, and align with enterprise risk objectives.

The role also evaluates broader cybersecurity risks, including network segmentation, intrusion prevention, cloud network security, remote access security, third-party connectivity, operational technology environments, and cybersecurity governance. Experience in Artificial Intelligence governance, security, and risk management is considered a plus.
** What You’ll Do for Us:
*** Execute risk-based audits, advisory reviews, and assessments focused on network security, firewall management, operational technology environments, network segmentation, intrusion prevention, and related cybersecurity controls.
* Evaluate the design and operating effectiveness of controls that prevent, detect, and respond to unauthorized access across enterprise networks, cloud environments, OT networks, industrial control systems, and critical technology infrastructure.
* Assess the governance, administration, and security of enterprise firewalls, cloud-native network security services, network access controls, and related perimeter defense technologies.
* Review firewall rule management, network configuration management, and change management processes, including provisioning, approvals, implementation, monitoring, recertification, and decommissioning activities.
* Evaluate network architecture and segmentation strategies across corporate, cloud, operational technology, and vendor-connected environments to determine whether critical assets are appropriately isolated and protected.
* Assess controls supporting remote access solutions, VPN technologies, third-party connectivity, internet-facing systems, DMZ environments, identity-aware network controls, and Zero Trust architectures.
* Evaluate the effectiveness of security monitoring capabilities, including intrusion detection and prevention systems, network detection and response solutions, security event monitoring, logging, alerting, and threat detection processes.
* Assess security controls over network infrastructure and related technologies, including routers, switches, wireless networks, load balancers, cloud networking components, industrial network devices, and supporting management platforms.
* Review cybersecurity controls within operational technology environments, including industrial control systems, SCADA systems, manufacturing networks, facility technologies, and other critical infrastructure components.
* Evaluate controls supporting hybrid network environments, cloud networking services, network segmentation models, and Zero Trust security architectures.
* Review controls over internet-facing services, administrative network access, network service accounts, machine-to-machine communications, and vendor connectivity.
* Evaluate governance and security controls supporting cloud networking, APIs, infrastructure integrations, and interconnected enterprise environments.
* Assess segmentation controls, network zoning, access restriction mechanisms, and perimeter defense frameworks.
* Evaluate monitoring, logging, alerting, and detective controls designed to identify unauthorized network activity, anomalous traffic patterns, potential intrusions, and network security events.
* Utilize data analytics and technology-enabled audit techniques to analyze firewall rulesets, network configurations, traffic patterns, connectivity paths, security events, and anomalous network activity.
* Identify control deficiencies, emerging threats, cybersecurity risks, and opportunities to strengthen network security, OT security, infrastructure resilience, and protection of enterprise assets.
* Develop clear, practical, and risk-informed…