OT Security Engineer

We use technology to solve problems in spaces, light, and more things to come, benefiting our customers, communities, and the planet. Acuity Inc. (NYSE: AYI) is a market‑leading industrial technology company that designs, manufactures, and markets products and services through its two business segments: Acuity Brands Lighting and Lighting Controls (ABL) and the Intelligent Spaces Group (ISG). Our businesses operate at the intersection of sustainability and technology, helping customers save energy and reduce carbon emissions through innovative lighting, lighting controls, building management solutions, and location‑aware applications. We welcome applicants from outside Monterrey and offer a flexible location policy. Job Summary We’re seeking a talented OT/ICS cybersecurity specialist to join the Acuity OT/ICS Cyber Security team. The specialist will collaborate with Supply Chain, Engineering, Cybersecurity, IT, and Risk teams to design, implement, and manage security measures for industrial control systems. Responsibilities include conducting security assessments, identifying and mitigating risks, developing security countermeasures, and ensuring compliance with industry standards. The ideal candidate has a strong background in both cyber security and industrial control systems, focusing on protecting manufacturing environments. Key Tasks & Responsibilities (Essential Functions) Security Governance: Assist with ICs policy review and creation when needed. Develop, improve, and maintain detailed processes and procedures for security activities. Work with engineering and site operations teams to include security in capital projects and daily activities. Oversee related projects with diverse stakeholders. Risk and Compliance Management: Conduct comprehensive security risk assessments of ICs environments, including vulnerability assessments, testing, and risk analysis. Identify vulnerabilities and potential threats to ICs networks and systems. Develop and implement risk mitigation strategies for identified risks. Work with gap owners to remediate identified gaps and risks. Ensure compliance with industry standards and regulations (e.g., ISA/IEC 62443, NIST). Conduct regular audits and assessments to ensure ongoing compliance. Security Design and Implementation: Design, implement, and maintain security architectures for manufacturing and distribution center systems and environments. Design and implement cybersecurity countermeasures and security platforms. Implement robust network segmentation between IT and ICs networks. System Hardening and Vulnerability Management: Analyze new hardware and software to identify hardening opportunities. Assist in vulnerability identification, triage, and mitigation. Monitoring and Incident Response: Monitor ICs networks for security incidents, analyze threats, and respond to incidents to minimize impact and prevent recurrence. Develop and execute incident response plans and playbooks, and provide support in incident response activities. Investigate security incidents and perform forensic analysis. Collaboration and Training: Work closely with IT, operations, and engineering teams to integrate security best practices into ICs design and operations. Provide training and awareness programs for staff on ICs security best practices. Collaborate with external stakeholders, including vendors and regulatory bodies. Skills and Minimum Experience Required Requirements for the ICs Security Operations Specialist include: Bilingual and a completed degree. Working knowledge of industrial control systems (e.g., DCS, PLCs, SCADA). Strong understanding of cybersecurity frameworks for OT environments (ISA‑99/IEC 62443, NIST SP 800‑82, CIS). Knowledge of IT and OT security best practices and the differences between them. Understanding of protocols common in OT environments (Ethernet/IP, CIP, Modbus, OPC) and industrial networking topologies (ring, star). Familiarity with security technologies within OT environments such as firewalls, IDS, endpoint security solutions, access control systems. Strong understanding of network architecture and cybersecurity principles. Excellent analytical, problem‑solving, and communication skills. Ability to work independently and as part of a multidisciplinary team. #LI‑DP1 We value diversity and are an equal‑opportunity organization. All qualified applicants will be considered for employment without regard to race, color, age, gender, sexual orientation, gender identity and expression, ethnic or national origin, disability, pregnancy, and religion. #J-18808-Ljbffr