Sr. Cyber Security Engineer

If you are a GPI employee, please click the Employee Login before applying.

At Graphic Packaging International, we produce the paper cup that held your coffee this morning, the basket that transported those bottles of craft beer you enjoyed last weekend, and the microwave tray that heated your gourmet meal last night. We're one of the largest manufacturers of paperboard and paper-based packaging for some of the world's most recognized brands of food, beverage, foodservice, household, personal care and pet products. Headquartered in Atlanta, Georgia, we are collaborative, diverse, innovative individuals who create inspired packaging while giving back to our communities.

With over 25,000 employees working in more than 130 locations worldwide, we strive to be environmentally responsible in our industry and in the communities where we operate. We are committed to workplace diversity and offer compensation and benefits programs that are among the industry's best to reward the talented people who make our company successful.

If this sounds like something you would like to be a part of, we'd love to hear from you.

A World of Difference. Made Possible.

JOB SUMMARY:

This role requires a hybrid work schedule with in-office attendance in our Atlanta office Tuesday through Thursday in our and remote work on Monday and Friday

Reporting to the Manager, Cyber Security Engineering, the Senior Cyber Security Engineer is responsible for designing, implementing, supporting, and continually improving Graphic Packaging International's cybersecurity capabilities across both Information Technology (IT) and Operational Technology (OT) environments.

This role serves as the Subject Matter Expert (SME) for Network Access Control (NAC), OT Security, Network Security Management, OT Visibility, and Remote Access Security, helping to ensure the protection, resilience, and availability of critical manufacturing and business operations. The successful candidate will work closely with global IT teams, manufacturing facilities, managed service providers, vendors, and professional services partners to deliver secure and scalable cybersecurity solutions aligned with GPI's security strategy.

The Senior Cyber Security Engineer will act as the primary cybersecurity subject matter expert for OT environments, driving technology deployments, vulnerability reduction, risk mitigation, security architecture improvements, and the adoption of industry best practices across GPI's global manufacturing footprint. This role will also support broader cybersecurity initiatives and cross-train across additional cybersecurity technologies and platforms.

ESSENTIAL DUTIES & RESPONSIBILITIES:

Operational Technology (OT) Security

• Lead the design, implementation, and operational support of OT cybersecurity controls across Paperboard Manufacturing and Converting facilities globally.
• Serve as the primary OT Cybersecurity Subject Matter Expert (SME) for manufacturing environments supporting OT Engineers.
• Collaborate with OT Engineers and business stakeholders to reduce cyber risk while maintaining operational reliability.
• Support OT network segmentation initiatives and alignment with Purdue Model architecture principles.
• Ensure secure integration between IT and OT environments.

Network Access Control & Network Security

• SME for engineering, administration, and optimization of Network Access Control (NAC) solutions across enterprise and manufacturing environments.
• Drive NAC deployment, policy development, asset visibility, profiling, and compliance monitoring.
• Oversee OT visibility platforms and security monitoring technologies to improve asset discovery, classification, and threat detection.
• Design and implement secure remote access solutions for OT environments.
• Support network security technologies including firewalls, segmentation platforms, secure access solutions, and network monitoring tools.

ESSENTIAL DUTIES & RESPONSIBILITIES (CONT):

Security Engineering & Architecture

• Design, implement, and support complex cybersecurity technologies and solutions.
• Provide security architecture recommendations for new technology initiatives and manufacturing projects.
• Evaluate emerging cybersecurity technologies and provide recommendations aligned with business objectives and security strategy.
• Drive automation and process improvements to increase operational efficiency and reduce risk.
• Participate in cloud security initiatives and ensure secure deployment of cloud-enabled technologies.
• Develop technical standards, implementation guides, and security engineering best practices.

Governance, Compliance & Audit

• Support internal and external audits and compliance activities.
• Partner with Compliance, Internal Audit, and external vendors to maintain evidence required for SOX and regulatory audits.
• Ensure adherence to relevant security and privacy regulations, standards, and industry frameworks.
• Contribute to cybersecurity policies, standards, and governance processes.
• Drive continuous improvement in cybersecurity controls and operational effectiveness.

ESSENTIAL DUTIES & RESPONSIBILITIES (CONT):

Vulnerability & Risk Management

• Identify, assess, prioritize, and drive remediation of cyber security risks and vulnerabilities.
• Develop mitigation strategies for OT and IT security exposures.
• Collaborate with vulnerability management, infrastructure, and operations teams to improve security posture.
• Support security assessments, risk reviews, penetration testing activities, and technology evaluations.
• Assist Security Operations and Incident Response teams with root cause analysis and long-term risk reduction activities.

Collaboration & Leadership

• Partner with business, manufacturing, engineering, infrastructure, and application teams to provide cybersecurity consulting and guidance.
• Work effectively with managed service providers and third-party partners to ensure delivery of security services and project outcomes.
• Support a global operating model by working effectively across multiple regions and time zones.

REQUIRED QUALIFICATIONS & EXPERIENCE

Education

• Bachelor's Degree in Cyber Security, Information Security, Computer Science, Engineering, Information Technology, or related discipline, or equivalent practical experience.

Certifications (Preferred)

• CISSP (Certified Information Systems Security Professional)
• CompTIA Security+
• PMP (Project Management Professional) certification
• ITIL Foundation

Experience

• 5+ years of experience in Cyber Security, Information Security, or Security Engineering roles.
• Experience supporting cybersecurity programs within global enterprise environments.
• Demonstrated experience securing industrial manufacturing or OT environments.
• Experience working with managed security service providers and external consulting organizations.
• Experience leading technical implementations and cybersecurity projects.
• Experience supporting incident response, risk management, and security operations activities.

REQUIRED QUALIFICATIONS & EXPERIENCE (CONT):

Technical Skills

Strong experience in several of the following areas:

Operational Technology Security

• Industrial Control Systems (ICS)
• Manufacturing networks
• OT visibility technologies
• OT network segmentation

Network Security

• Network Access Control
• Firewalls and network segmentation
• Secure remote access platforms
• Network monitoring and traffic analysis
• Zero Trust architecture

Security Technologies

Awareness and knowledge of :

• Endpoint Protection and EDR
• SIEM and Security Monitoring
• Email Security
• Cloud Security Platforms

PERSONAL ATTRIBUTES

• Strong analytical and problem-solving abilities.
• Excellent communication and stakeholder management skills.
• Ability to influence and engage technical and non-technical audiences.
• Self-motivated with a continuous improvement mindset.
• Comfortable working independently while collaborating across global teams.
• Able to manage multiple priorities within a complex and fast-paced environment.

Disclaimer

The candidate must be able to perform the essential functions of the position satisfactorily, with or without a reasonable accommodation. Graphic Packaging retains the right to change or assign other duties to this position.

COMPETENCIES

Business Acumen

Curiosity

Interpersonal Skills

Influence Skills

Self-Starter

Negotiation Skills

Organization Skills

Results Oriented

Why Join GPI?

This role provides the opportunity to lead cybersecurity initiatives across a global manufacturing organization, influence the future direction of OT security, work with leading security technologies, and play a key role in protecting critical manufacturing operations worldwide.

Pay Range

$97,200.00 - $129,600.00

Pay Range: $97,200.00 - $129,600.00

Graphic Packaging is an equal opportunity employer and abides by all applicable federal, state provincial and local laws with respect to the recruitment and hiring process. We are committed to an inclusive, barrier-free recruitment and hiring process free from discrimination or harassment based upon race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Should you require an accommodation for a disability, please contact your Human Resources representative or email accommodations@graphicpkg.com.

Requisition: 15658