Senior Director, OT Cybersecurity Strategy - Data Centers
Role Overview
Role Overview Hyperscale data centers get built at a pace the security industry hasn't caught up to. Concrete gets poured, BMS gets commissioned, and OT networks go live, often before anyone has checked whether the controls integrator is dragging unmanaged switches and unpatched jump boxes onto the floor. That's the reality. This is a confidential retained search for a Senior Director of OT Cybersecurity Strategy at a hyperscaler whose logo you'd recognize. You won't be patching PLCs. You'll be the one making sure the specs, standards, and partner requirements are right before the first cage is built across a North American portfolio that's expanding aggressively. You'll own how this company engages its building and design partners on OT security. That means the architects, MEP firms, GCs, and controls integrators who decide what actually gets installed and how it talks. Get it wrong at design, and the problem lives in the walls for twenty years.
The Mission
- ·Strategy & Standards — Define the OT cybersecurity reference architecture, design standards, and partner requirements for new data center builds. Align to IEC 62443 and NIST CSF without turning the program into a paperwork exercise.
- ·Partner Engagement — Lead the security conversation with architects, MEP engineers, controls integrators, and equipment OEMs across North America. Make sure requirements are enforceable, not aspirational.
- ·Program Leadership — Build the team and governance that turns strategy into repeatable execution. Work cross-functionally with Engineering, Construction, Real Estate, IT Security, and Legal.
- ·Threat-Informed Design — Translate current OT/ICS threat intel , nation-state campaigns, ransomware, supply chain compromise etc into concrete design decisions. Know the difference between a theoretical CVE and something that matters in a live BMS.
- ·Executive Influence — Brief senior leadership on OT risk in language they'll act on. No FUD, no vendor deck slides.
Relevant Skills and Experience
You're the right person for this if you have:
- ·12+ years in cybersecurity with at least 5 leading OT/ICS programs at scale, hyperscale, critical infrastructure, or large industrial environments
- ·Working knowledge of IEC 62443 and NIST CSF as they apply to BMS/BAS, BACnet, Modbus, and the broader Purdue model in practice
- ·A track record of influencing design and construction partners ….OT security specs you've written actually got built to, not just filed
- ·Executive presence and the ability to run a function, not just a project
- ·GICSP, CISSP, or equivalent — credentials that signal you've done the work
Job Summary
VMG guarantees strict confidentiality for all applicants.