Staff Engineer, OT Risk & Controls

Overview

THE ROLE:

The OT Cybersecurity Solution Architect will work a hybrid schedule, working mostly onsite at our state of art Innovation and Manufacturing facility in Winston-Salem, NC. Will serve as the primary authority for securing Herbalife’s global manufacturing operations. Will design secure architectures for control systems, SCADA, and MES environments, managing OT risks, and ensuring compliance with cybersecurity standards. The candidate will work closely with IT Cybersecurity, Control Engineers, and SCADA teams to implement secure solutions, lead vulnerability remediation efforts, and oversee cyber documentation for new equipment installations.

• Lead security assessments of OT systems and manufacturing networks to identify risks and ensure compliance with internal and industry cybersecurity standards.
• Design secure architectures for SCADA, MES, and control systems, including network segmentation and secure remote access strategies.
• Collaborate with IT Cybersecurity and Control Engineering teams to integrate security across system life cycles.
• Manage OT risk registers, track vulnerabilities, and drive remediation efforts across global sites.
• Work with control engineers to prepare and submit cybersecurity documentation for new machine installation.
• Define and implement access control policies, change control procedures, and secure configuration standards for OT assets.
• Develop and maintain cybersecurity architecture review documents and ensure alignment with enterprise security policies.
• Provide training and guidance to engineering and operations teams on OT cybersecurity best practices.
• Support and solve FAT/SATs, and design reviews for control systems and network infrastructure.
• Drive adoption of cybersecurity tools and standards across manufacturing domains.
• Perform additional duties as assigned.

WHAT’S SPECIAL ABOUT THE TEAM:
Great opportunity to join a high-impact engineering team leading innovation in OT and cybersecurity. As the OT security expert, you’ll collaborate across subject areas to protect critical infrastructure and shape the future of secure manufacturing for a global nutrition and lifestyle company. Will work in a collaborative team environment and atmosphere that works together to do what is right and to continuously improve the operation.

Team takes pride in rising to any challenge and being flexible to adjust to business requirements. Our success is driven by accountability, collaboration, respect, and clarity.

NONE

• Strong programming skills in PLCs and HMIs (Allen Bradley preferred).
• Deep understanding of industrial cybersecurity tools (e.g., Tenable) and standards.
• Experience designing secure network architectures and implementing defense-in-depth strategies.
• Familiarity with SCADA (AVEVA preferred), MES, and industrial protocols.
• Knowledge of access control, change control, and system hardening practices.
• Excellent communication and documentation skills for cross-functional collaboration.
• Ability to work independently and lead cybersecurity responsibilities across multiple sites.

• 7 plus years in industrial cybersecurity or control systems engineering.
• Experience conducting vulnerability assessments and managing remediation plans.

• Bachelor's degreein Computer Science or Electrical Engineering

• Master’s or certifications like CISSP, GICSP are a plus
• Experience Pharmaceutical, Food, or CPG industries is a plus
• Solid understanding of cGMPs, HACCP/AIB, and FDA regulations in Food and Nutrition industries is a plus

In general, the following physical demands are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be considered to perform the essential functions of the job.

• Must be able to see, hear, speak and write clearly in order to communicate with employees and/or other customers
• Light office work, some light lifting, and walking may be required

In general, the following conditions of the work…