Description

Key Responsibilities

• Cybersecurity & Risk Assessment

• Conduct end-to-end cybersecurity assessments of enterprise and OT environments.

• Evaluate security controls across WMS, ERP, middleware, warehouse automation, and supporting business applications.

• Assess identity and access management controls, privileged access, role-based access, and segregation of duties.

• Identify cybersecurity risks, control gaps, and resilience weaknesses.

• OT & Supply Chain Security

• Assess security posture of warehouse operations and automation environments.

• Review cyber risks impacting receiving, inventory management, pick/pack, shipping, and distribution processes.

• Evaluate OT security architecture, system trust boundaries, and operational dependencies.

• Analyze risks associated with external partner connectivity and integrated supply chain platforms.

• Resilience & Recovery Assessment

• Evaluate business continuity, disaster recovery, backup, and recovery processes.

• Assess resilience of critical business applications and operational workflows.

• Review incident response, alerting, monitoring, change management, and operational governance processes.

• Identify single points of failure and operational vulnerabilities.

• Risk Analysis & Root Cause Assessment

• Conduct workshops with business and IT stakeholders.

• Perform Failure Mode and Effects Analysis (FMEA), Root Cause Analysis (RCA), and 5-Why assessments.

• Develop risk classification models and resilience scorecards.

• Establish risk priorities and recommend mitigation strategies.

• Executive Advisory & Reporting

• Present findings to business, technology, and executive stakeholders.

• Develop executive-level assessment reports and findings presentations.

• Provide short-term, medium-term, and strategic recommendations.

• Support roadmap development for future-state modernization initiatives.

• Required Skills & Experience

• Must-Have

• years of experience in Cybersecurity, Risk Management, or Security Architecture.

• Strong experience assessing enterprise application environments and operational systems.

• Experience with:

• Warehouse Management Systems (WMS)

• Supply Chain Platforms

• ERP Systems

• Middleware & Integration Technologies

• Operational Technology (OT) Environments

Hands-on experience in:

• Cyber Risk Assessments

• Security Architecture Reviews

• Access Management Reviews

• Compliance Assessments

• Business Continuity & Disaster Recovery

• Strong understanding of security governance and risk frameworks.

• Excellent stakeholder engagement and executive presentation skills.

Preferred

• Experience with Blue Yonder, Manhattan WMS, SAP, MuleSoft, ServiceNow, or similar platforms.

• Knowledge of NIST CSF, NIST 800-82, IEC 62443, ISO 27001, CIS Controls, and Zero Trust principles.

• Experience in manufacturing, distribution, healthcare, logistics, or supply chain environments.

• CISSP, CISM, CRISC, GIAC, GICSP, or equivalent certifications.

• Expected Deliverables

• Executive Deliverables

• Risk & Resilience Assessment Report

• Cybersecurity Scorecard

• Executive Findings Presentation

• Prioritized Risk Recommendations

• Technical Deliverables

• Cyber Risk Register

• Access Control Assessment

• Security Architecture Review

• Dependency and Trust-Boundary Maps

• Recovery Readiness Assessment

• Strategic Deliverables

• Cybersecurity Improvement Roadmap

• Investment Prioritization Matrix

• Resilience Enhancement Plan

• Future-State Security Recommendations

Key Skills

Education

Bachelor's degree