Senior Security Leader

We are looking for someone to lead the cybersecurity strategy for connected industrial products within a construction and contractor environment in Wisconsin. This contract opportunity is suited for an individual who can shape secure product design, guide risk-based decisions, and serve as a trusted advisor on IIoT and OT security matters. The role blends hands-on technical leadership with governance responsibilities to strengthen resilience across product architecture, vulnerability management, and compliance-focused security practices.

Responsibilities:

• Develop and maintain the security architecture for connected IIoT offerings, establishing controls for device trust, certificate-based identity, secure startup processes, cryptographic key protection, and hardware-backed security foundations.

• Direct structured threat assessments for new products and major enhancements, identifying potential attack paths and converting findings into practical engineering and design requirements.

• Act as the lead advisor for product and operational technology security, offering expert guidance to engineering and business stakeholders on secure development and risk reduction.

• Partner with cross-functional teams to embed cybersecurity requirements into product lifecycles, ensuring security considerations are addressed from concept through release.

• Oversee vulnerability assessment activities by reviewing security weaknesses, prioritizing remediation efforts, and driving resolution plans with technical teams.

• Support governance and compliance initiatives by aligning product security practices with applicable standards, internal controls, and risk management expectations.

• Collaborate with teams responsible for monitoring and incident readiness to improve visibility into security events, strengthen response planning, and inform defensive improvements.

• Use tools such as JIRA to track security initiatives, document findings, and manage follow-up actions related to product and infrastructure security.

• Contribute to performance discussions, stakeholder communication, and service-oriented engagement to ensure security objectives are delivered effectively across the organization.

• 5+ years of experience in cybersecurity, with a strong background in security architecture, application security, or enterprise security.
• Demonstrated experience supporting IIoT, OT, network security, or connected device environments.
• Knowledge of PKI, certificate management, secure boot concepts, cryptographic key handling, and hardware root of trust principles.
• Hands-on experience with threat modeling, vulnerability analysis, vulnerability assessment, and cyber risk evaluation.
• Familiarity with SIEM platforms, security monitoring practices, and broader incident readiness concepts.
• Understanding of compliance, security standards, and frameworks such as ISO/IEC in regulated or operational environments.
• Ability to communicate effectively with technical and non-technical stakeholders while providing high-quality customer-focused support.
• Experience using JIRA or similar platforms to manage security tasks, findings, and remediation workflows.