Cybersecurity Lead

Cybersecurity Lead (IT/OT)

Novaspect, Inc., an Emerson Local Business Partner and leader in process automation systems and solutions, is seeking a Cybersecurity Lead (IT/OT) to join our Technology Team in Schaumburg, Illinois. This role will advance Novaspect’s cybersecurity program across enterprise IT and operational technology (OT) environments, setting strategy, managing risk, establishing security standards and architecture, and protecting our systems, data, operations, and customers while strengthening cyber resilience.

This is a hands‑on senior cybersecurity role for an experienced professional who combines strong technical expertise with strategic thinking, business acumen, and sound risk‑based decision-making. Working across IT, OT, Engineering, Operations, business teams, customers, and external security partners, this individual will evaluate risk, guide security decisions, represent Novaspect effectively in customer cybersecurity discussions, provide cybersecurity direction during significant incidents, and ensure security controls are effective, scalable, and aligned with business and operational needs.

Set direction for Novaspect’s cybersecurity program across IT and OT environments, establishing priorities and maintaining a risk‑based roadmap aligned with business needs, operational requirements, customer commitments, and evolving threats, while coordinating internal resources and external cybersecurity expertise to support execution of program priorities. Establish and maintain cybersecurity policies, standards, architecture principles, technical requirements, and secure design practices across enterprise IT, OT, cloud, applications, data platforms, and integrations.

Assess cybersecurity risks and vulnerabilities, drive appropriate remediation and compensating controls, and coordinate exceptions, risk acceptance, and escalation, ensuring material risks have clear ownership, appropriate visibility, and a defined path for treatment or acceptance. Evaluate cybersecurity implications and define security requirements for new technologies, software, AI‑enabled solutions, infrastructure changes, integrations, customer connectivity, and other significant initiatives, ensuring material risks are identified and addressed early in the technology lifecycle.

Partner with IT, OT, Engineering, and Operations teams to strengthen industrial cybersecurity, including asset visibility, network segmentation and industrial DMZs, secure remote and vendor access, identity and privileged access, vulnerability management, patching and lifecycle management, monitoring, and compensating controls for legacy or constrained systems. Establish and oversee Novaspect’s AI governance and security program in partnership with the AI Transformation Lead and business stakeholders, including policies, standards, risk assessments, control requirements, third‑party AI risk, governance reviews, and alignment with relevant frameworks, standards, and regulatory requirements such as the NIST AI RMF and ISO/IEC 42001.

Provide cybersecurity direction for incident preparedness and response, coordinate cross‑functional action during significant incidents, and strengthen response plans through exercises, lessons learned, and continuous improvement. Partner with Technology and business stakeholders on business continuity, disaster recovery, and cyber resilience, ensuring critical technology dependencies, cyber incident scenarios, backup and recovery capabilities, and recovery requirements are appropriately addressed and tested. Oversee cybersecurity assurance and third‑party risk activities, including SOC2, customer security assessments and discussions, audits, penetration…