Operational Technology Security Specialist

Operational Technology Security Program Specialist We're looking for an Operational Technology Security Program Specialist to establish and mature BYU's cybersecurity program for the systems that support campus operations. This role will serve as a key liaison among Information Technology, Physical Facilities, security operations, Risk Management, vendors, and other partners. You'll develop security governance, assess and reduce risk, and improve monitoring and incident response for operational technology environments. The ideal candidate can balance cybersecurity needs with operational continuity, safety, and the unique requirements of OT systems (campus physical facilities not factory/manufacturing). What you'll do in this role - Establish and advance BYU's Operational Technology Security Program. - Develop and maintain OT cybersecurity policies, standards, procedures, and implementation guidelines. - Define governance structures, roles, responsibilities, risk acceptance processes, and a multi-year security roadmap. - Conduct OT risk assessments and integrate OT risks into enterprise risk management processes. - Maintain OT asset inventories, classifications, system documentation, and network diagrams. - Review OT architectures, projects, and technology deployments to ensure security requirements are addressed. - Evaluate controls such as network segmentation, remote access, system hardening, access management, and monitoring. - Develop OT-specific monitoring requirements, detection use cases, incident response procedures, and continuity plans. - Coordinate security assessments, tabletop exercises, incident reviews, remediation activities, and risk reporting. - Collaborate with facilities, engineering, security operations, vendors, and other stakeholders to improve OT security while preserving reliability and safety. What qualifies you for this role - Bachelor's degree in cybersecurity, information technology, engineering, facilities management, industrial technology, or a related field---or an equivalent combination of education and experience. - Experience developing, implementing, or supporting cybersecurity, operational technology, industrial control systems, building automation systems, or related programs. - Experience conducting risk assessments, security audits, compliance reviews, or incident response activities. - Knowledge of cybersecurity governance, risk management, and security control frameworks. - Understanding of the safety, availability, reliability, and operational requirements of OT environments. - Strong written, verbal, collaboration, and stakeholder-management skills. - Familiarity with the NIST Cybersecurity Framework, NIST SP 800-82, ISA/IEC 62443, or related OT security guidance is preferred. - Experience with building automation systems, facilities technologies, critical infrastructure, higher education, healthcare, utilities, or similar operational environments is preferred. Typical Starting Pay: $104,500-$135,500 The actual compensation offered will take into consideration internal equity and may vary based on the candidate's job-related experience, knowledge, skills, and other relevant factors. Candidates with very significant work-related experience may receive an offer higher than the posted typical range.