Cybersecurity Auditor – Network & Firewall Management and Operational Technology (OT)

Job Description Summary:
The Coca-Cola Company is seeking a highly motivated Cybersecurity Auditor with a focus on Network & Firewall Management and Operational Technology (OT) to join the Internal Audit Team. This role is responsible for providing independent assurance and advisory services related to cybersecurity risks, controls, governance, and compliance, with a primary focus on network security, firewall management, and operational technology security.
The position partners with business, technology, Information Security, Risk Management, and Compliance stakeholders to assess whether network security controls effectively protect organizational assets, support regulatory requirements, and align with enterprise risk objectives.
The role also evaluates broader cybersecurity risks, including network segmentation, intrusion prevention, cloud network security, remote access security, third-party connectivity, operational technology environments, and cybersecurity governance. Experience in Artificial Intelligence governance, security, and risk management is considered a plus.
What You’ll Do for Us:
Execute risk-based audits, advisory reviews, and assessments focused on network security, firewall management, operational technology environments, network segmentation, intrusion prevention, and related cybersecurity controls.
Evaluate the design and operating effectiveness of controls that prevent, detect, and respond to unauthorized access across enterprise networks, cloud environments, OT networks, industrial control systems, and critical technology infrastructure.
Assess the governance, administration, and security of enterprise firewalls, cloud-native network security services, network access controls, and related perimeter defense technologies.
Review firewall rule management, network configuration management, and change management processes, including provisioning, approvals, implementation, monitoring, recertification, and decommissioning activities.
Evaluate network architecture and segmentation strategies across corporate, cloud, operational technology, and vendor-connected environments to determine whether critical assets are appropriately isolated and protected.
Assess controls supporting remote access solutions, VPN technologies, third-party connectivity, internet-facing systems, DMZ environments, identity-aware network controls, and Zero Trust architectures.
Evaluate the effectiveness of security monitoring capabilities, including intrusion detection and prevention systems, network detection and response solutions, security event monitoring, logging, alerting, and threat detection processes.
Assess security controls over network infrastructure and related technologies, including routers, switches, wireless networks, load balancers, cloud networking components, industrial network devices, and supporting management platforms.
Review cybersecurity controls within operational technology environments, including industrial control systems, SCADA systems, manufacturing networks, facility technologies, and other critical infrastructure components.
Evaluate controls supporting hybrid network environments, cloud networking services, network segmentation models, and Zero Trust security architectures.
Review controls over internet-facing services, administrative network access, network service accounts, machine-to-machine communications, and vendor connectivity.
Evaluate governance and security controls supporting cloud networking, APIs, infrastructure integrations, and interconnected enterprise environments.
Assess segmentation controls, network zoning, access restriction mechanisms, and perimeter defense frameworks.
Evaluate monitoring, logging, alerting, and detective controls designed to identify unauthorized network activity, anomalous traffic patterns, potential intrusions, and network security events.
Utilize data analytics and technology-enabled audit techniques to analyze firewall rulesets, network configurations, traffic patterns, connectivity paths, security events, and anomalous network activity.
Identify control deficiencies, emerging threats, cybersecurity risks, and opportunities to strengthen network security, OT security, infrastructure resilience, and protection of enterprise assets.
Develop clear, practical, and risk-informed recommendations that enhance network security, perimeter defenses, OT security, infrastructure resilience, and overall cybersecurity maturity.
Monitor emerging cybersecurity threats, vulnerabilities, attack techniques, and regulatory developments.
Evaluate cybersecurity risks associated with digital transformation initiatives and evolving network architectures.
Consider cybersecurity implications related to cloud adoption, software-defined networking, automation, and new technologies.
Support audit coverage of Artificial Intelligence governance, AI-enabled business processes, and AI security risks when applicable.
Identify technology and cybersecurity trends that may affect organizational risk exposure.
Utilize data analytics and technology-enabled auditing techniques to enhance audit effectiveness.
Analyze firewall rulesets, network traffic, security logs, threat intelligence data, and network activity to identify risk indicators.
Leverage automation and analytical tools to improve audit efficiency and coverage.
Build collaborative relationships with Information Security, Network Engineering, Infrastructure Teams, Risk Management, Compliance, and business leaders.
Communicate audit observations and risk insights effectively to management.
Assist in preparing audit reports, presentations, and executive communications.
Support issue validation and remediation monitoring activities.
Position Details:
Location: Atlanta, GeorgiaTravel: 30% domestic and internationalIndividual contributor role - no direct reports
Qualifications & Requirements:
Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Information Technology, or a related field.
Two to five years of experience in Cybersecurity, Information Security, Network Security, IT Audit, Cybersecurity Audit, Firewall Administration, Network Engineering, Operational Technology Security, or related disciplines.
Understanding of cybersecurity principles, risks, controls, and governance practices.
Knowledge of network security concepts and control frameworks.
Understanding of:
Network architecture and security principles
Network segmentation and micro-segmentation
Firewall administration and rule management
Intrusion Detection and Prevention Systems
Network Detection and Response solutions
Virtual Private Networks
Cloud network security
Operational Technology, Industrial Control Systems, and SCADA security concepts
Security monitoring, logging, and incident detection processes
Strong analytical, problem-solving, and communication skills.
Preferred Qualifications:
Experience auditing or administering network security technologies such as Palo Alto, Check Point, Cisco Firepower, Fortinet, Juniper, Zscaler, Claroty, or similar platforms.
Experience auditing cloud network security environments such as Azure, Amazon Web Services, or Google Cloud.
Experience assessing operational technology environments, industrial control systems, manufacturing technology, SCADA environments, or critical infrastructure security controls.
Familiarity with the NIST Cybersecurity Framework, NIST 800-53, ISO 27001, COBIT, CIS Controls, or similar frameworks.
Professional certifications such as:
CISA
CISSP
CRISC
Security+
CISM
CCNP Security
Nice to Have:
Experience in Artificial Intelligence governance, AI risk management, and AI security concepts.
Experience assessing controls related to AI development, deployment, or usage.
Familiarity with AI governance frameworks, model risk considerations, and AI data protection controls.
Experience leveraging AI-enabled tools for audit planning, testing, analytics, or reporting.
Other Skills:
This position requires expertise or competency in the following cybersecurity and technology areas:
Network Security
Firewall Management
Network Architecture
Network Segmentation and Micro-Segmentation
Cloud Network Security
Operational Technology Security
Industrial Control Systems Security
SCADA Security
Intrusion Detection and Prevention
Network Detection and Response
Zero Trust security concepts
Security monitoring and logging
Security governance
Technology controls
Data analytics
The position also requires expertise or competency in the following audit and risk areas:
Risk-based auditing
Internal controls
Root cause analysis
Issue identification and validation
Regulatory compliance
The successful candidate combines strong cybersecurity expertise with deep knowledge of network security, firewall management, and operational technology security, leveraging risk insights, analytics, and emerging technology awareness to provide assurance over critical network, perimeter, and industrial control system security controls.