Ot Cybersecurity Compliance Lead – Emea Projects And Systems
pDematic is a global leader in intelligent intralogistics and automated material handling solutions, delivering large-scale warehouse automation systems for some of the world’s leading brands. For decades, we’ve been redefining supply chains through innovation and cutting-edge automation technologies. We are looking for an OT Cybersecurity Compliance Lead who will be responsible for driving the cybersecurity of the operational technology (OT) systems delivered within the EMEA region. This covers Dematic systems throughout their lifecycle – from solution design and engineering to commissioning, handover and ongoing operation. You will work closely with project teams, solution engineering, customers and suppliers to embed security by design, manage cyber risk, and ensure that delivered automation systems meet customer requirements, company standards and applicable regulations. As the OT Cybersecurity Compliance Lead, you will drive, monitor and report on the compliance of OT systems with the EU Cyber Resilience Act and the Machinery Regulation (EU) 2023/1230, and apply ISA/IEC 62443 across projects in order to prevent, mitigate and / or detect cyber risks to delivered systems. You will be responsible for system-level security architecture, assurance and documentation within dedicated projects – a scope distinct from corporate IT security and from product-level cybersecurity, which are owned by separate functions. /ph3Cosa offriamo: /h3ulliCareer Development /liliCompetitive Compensation And Benefits /liliPay Transparency /liliGlobal Opportunities /li /ulpbLearn More Here: /b ( The base pay range for this role, at the time of posting, is estimated to be the following should this role be filled in the respective country: bItaly: /b €55,125 - €80,850 (Compensation will be aligned with the applicable National Collective Labour Agreement, namely the CBA , Metalmeccanico Industria) bLithuania: /b €54,000 - €79,200 Final compensation will be determined by various factors such as work location, education, experience, knowledge, and skills. /ph3Responsabilità e requisiti: /h3h3What you'll be responsible for: /h3ullibRegulatory Compliance (Cyber Resilience Act Machinery Regulation):
/b /liliTranslate the EU Cyber Resilience Act and Machinery Regulation (EU) 2023/1230 cybersecurity requirements into practical, auditable engineering and project requirements for OT systems. /liliMaintain readiness for the regulatory milestones (CRA vulnerability/incident reporting from September 2026 and full application December 2027; Machinery Regulation from January 2027). /liliDemonstrate system-level conformity where both regimes apply, reusing product-level assurance and closing the remaining integration gaps. /lilibSecure-by-Design across the Project Lifecycle: /b /liliEmbed OT cybersecurity into the project lifecycle as gated, repeatable activities from design and engineering through FAT/SAT, commissioning and handover. /liliAuthor and review security requirements, architecture and risk assessments for bids and live projects, and advise project and solution teams. /liliProduce handover security documentation and the operations and maintenance security baseline inherited by the customer and Dematic Service. /lilibOT Systems Standards (IEC 62443): /b /liliApply ISA/IEC 62443 across OT systems – zones and conduits, network segmentation, secure remote access, hardening, patch and backup strategy. /liliDefine reference architectures, hardening standards and reusable security building blocks so projects start from a compliant baseline. /lilibRisk, Assurance and Testing: /b /liliConduct OT-specific risk assessments, security testing and assurance reviews; track findings and mitigations to closure across projects and the installed base. /liliSupport OT security incident readiness and response for delivered systems, in coordination with IT Security and the customer. /lilibStakeholder Collaboration:
/b /liliAct as the OT cybersecurity point of contact for project, engineering, quality, legal/compliance and customer stakeholders. /liliProvide guidance and training to project teams on OT security requirements and expectations. /lilibContinuous Improvement: /b /liliCapture lessons learned and feed them back into standards, reference designs and training. /liliHelp build Dematic's OT cybersecurity capability so it scales with the project pipeline. /lilibCompliance: /b /liliEnsure compliance with relevant industry standards, regulations and company policies. /liliParticipate in internal and external audits as required. /li /ulh3What we're looking for: /h3ulliBachelor's degree in Engineering, Automation, Computer Science, Cybersecurity, or a related field (or equivalent practical experience). /liliMinimum of 5 years of relevant experience in OT / IC… /liliWorking knowledge of ISA/IEC 62443 and OT/ICS security fundamentals (network segmentation, hardening, secure remote access, OT/IT interface). /liliFamiliarity with the EU Cyber Resilience Act and Machinery Regulation (EU) 2023/1230 (and the legacy Machinery Directive 2006/42/EC); awareness of NIS2. /liliFamiliarity with material handling systems, automation solutions, industrial control technology (PLC, SCADA, industrial networks) and supply chain logistics. /liliProven ability to write and produce technical and compliance reports. /liliExperience embedding cybersecurity into the project and engineering lifecycle. /liliAbility to oversee internal and external security and compliance audits. /liliStrong analytical, problem-solving, and communication skills. /liliAbility to work independently and manage multiple projects in a fast-paced environment. /liliAbility to influence and collaborate with cross-functional teams in an international and matrix organization. /liliFluency in English (additional European languages are a plus). /liliISA/IEC 62443 certification (e.g. Cybersecurity Fundamentals, Risk Assessment or Design Specialist), GICSP, or an equivalent OT-security credential is an advantage. /liliWillingness to travel internationally as required to support the role, up to 25% of the time. /li /ul #J-18808-Ljbffr
/b /liliTranslate the EU Cyber Resilience Act and Machinery Regulation (EU) 2023/1230 cybersecurity requirements into practical, auditable engineering and project requirements for OT systems. /liliMaintain readiness for the regulatory milestones (CRA vulnerability/incident reporting from September 2026 and full application December 2027; Machinery Regulation from January 2027). /liliDemonstrate system-level conformity where both regimes apply, reusing product-level assurance and closing the remaining integration gaps. /lilibSecure-by-Design across the Project Lifecycle: /b /liliEmbed OT cybersecurity into the project lifecycle as gated, repeatable activities from design and engineering through FAT/SAT, commissioning and handover. /liliAuthor and review security requirements, architecture and risk assessments for bids and live projects, and advise project and solution teams. /liliProduce handover security documentation and the operations and maintenance security baseline inherited by the customer and Dematic Service. /lilibOT Systems Standards (IEC 62443): /b /liliApply ISA/IEC 62443 across OT systems – zones and conduits, network segmentation, secure remote access, hardening, patch and backup strategy. /liliDefine reference architectures, hardening standards and reusable security building blocks so projects start from a compliant baseline. /lilibRisk, Assurance and Testing: /b /liliConduct OT-specific risk assessments, security testing and assurance reviews; track findings and mitigations to closure across projects and the installed base. /liliSupport OT security incident readiness and response for delivered systems, in coordination with IT Security and the customer. /lilibStakeholder Collaboration:
/b /liliAct as the OT cybersecurity point of contact for project, engineering, quality, legal/compliance and customer stakeholders. /liliProvide guidance and training to project teams on OT security requirements and expectations. /lilibContinuous Improvement: /b /liliCapture lessons learned and feed them back into standards, reference designs and training. /liliHelp build Dematic's OT cybersecurity capability so it scales with the project pipeline. /lilibCompliance: /b /liliEnsure compliance with relevant industry standards, regulations and company policies. /liliParticipate in internal and external audits as required. /li /ulh3What we're looking for: /h3ulliBachelor's degree in Engineering, Automation, Computer Science, Cybersecurity, or a related field (or equivalent practical experience). /liliMinimum of 5 years of relevant experience in OT / IC… /liliWorking knowledge of ISA/IEC 62443 and OT/ICS security fundamentals (network segmentation, hardening, secure remote access, OT/IT interface). /liliFamiliarity with the EU Cyber Resilience Act and Machinery Regulation (EU) 2023/1230 (and the legacy Machinery Directive 2006/42/EC); awareness of NIS2. /liliFamiliarity with material handling systems, automation solutions, industrial control technology (PLC, SCADA, industrial networks) and supply chain logistics. /liliProven ability to write and produce technical and compliance reports. /liliExperience embedding cybersecurity into the project and engineering lifecycle. /liliAbility to oversee internal and external security and compliance audits. /liliStrong analytical, problem-solving, and communication skills. /liliAbility to work independently and manage multiple projects in a fast-paced environment. /liliAbility to influence and collaborate with cross-functional teams in an international and matrix organization. /liliFluency in English (additional European languages are a plus). /liliISA/IEC 62443 certification (e.g. Cybersecurity Fundamentals, Risk Assessment or Design Specialist), GICSP, or an equivalent OT-security credential is an advantage. /liliWillingness to travel internationally as required to support the role, up to 25% of the time. /li /ul #J-18808-Ljbffr