Eugene Marchenko

Global IT/OT Security Director | Cyber Resilience for Manufacturing, Natural Resources & Mining | Board-Level Risk Management | NIS2

Leuven, Flemish Region, Belgium

About

Bridge-builder between Corporate IT and the Plant Floor. Protecting global critical infrastructure through pragmatic, business-aligned security. With over 25 years in IT and 14+ years in senior cybersecurity leadership, I specialize in navigating the high-stakes intersection of global enterprise IT and heavy industrial operations (OT). My focus is on Operational Resilience: ensuring that 24/7 production environments remain secure, compliant, and continuously operational in an increasingly volatile threat landscape. As the Global IT & OT Security Director for Carmeuse, I lead the end-to-end security strategy for a 160-year-old industrial leader with 90+ production sites worldwide. My role is to translate complex technical risks into financial and operational impact for C-suite executives and the Board, ensuring that security investments drive measurable business value. Strategic Impact Areas: IT/OT Convergence & Industry 4.0: Architecting "Smart Plant" environments using the Purdue Model and IEC 62443 principles. I have directly led the deployment of OT-specific threat detection (Nozomi/Claroty) and secure remote access (BeyondTrust) to harden the shop floor against lateral movement. Enterprise Transformation: Executing large-scale shifts from legacy infrastructure to modern, identity-centric defenses. This includes migrating 6,000+ users to Zero Trust architectures (Zscaler) and unified IAM frameworks (Microsoft Entra ID/CyberArk). Global Cyber Defense: Establishing 24/7 Cyber Defense Centers (SOC/MDR) and co-sourced security models to provide high-fidelity detection and containment across multinational assets. Crisis & Change Management: Serving as the senior incident leader for major cyber crises while fostering a "Security-First" culture across a diverse global workforce. I believe that for a CISO in the industrial sector, success is measured by the business's ability to take calculated risks safely. I leverage frameworks like SABSA, ISO 27001, and NIST to build security programs that are robust enough for compliance (NIS2, GDPR) but flexible enough for innovation Let’s connect to discuss the future of industrial cyber resilience and IT/OT convergence.

Experience

  • Global IT & OT Security Director at Carmeuse
    Jan 2021 - Present · 5 yrs 6 mos

    Full-spectrum IT/OT leadership and Digital Transformation at global scale. I lead the global cybersecurity strategy and operational resilience for a 160-year-old industrial group with 90+ production sites and 6,000 employees. As a member of the Group IT Leadership team, I own the end-to-end security roadmap, ensuring production continuity across a complex IT/OT landscape. Key Achievements: * IT/OT Convergence: Architected a secure program, deploying OT-specific threat detection and secure remote access to protect critical ICS networks. * Zero Trust Transformation: Directed the enterprise-wide shift from legacy VPN to a ZTNA, establishing the internet as the secure corporate network. * Executive Governance: Manage C-level risk quantification and quarterly reporting to the CIO on roadmap progress and threat posture. * Cyber Defense: Established a 24/7 co-sourced Global SOC covering all IT and OT assets

  • Head of cyber security & compliance - Zone Europe at Anheuser-Busch InBev
    Sep 2017 - Jan 2021 · 3 yrs 5 mos

    Regional leadership, Brand Protection, and high-volume supply chain security. Directed end-to-end cybersecurity and IT compliance for the European Zone of the world’s largest brewer, supporting 25+ breweries and 12,000+ employees. I specialized in adapting global strategies to regional regulatory requirements (GDPR) and unique operational risks. Key Achievements: * Industrial Hardening: Secured 15 major European breweries by deploying network segmentation and OT threat detection for production environments. * Application & Brand Security: Protected public-facing digital assets through WAF deployment and robust vulnerability management. * Cloud Governance: Leveraged CASB and CSPM to ensure continuous compliance and governance across cloud-native environments. * Crisis Leadership: Served as the senior leader for all European cyber incidents and data breaches, collaborating closely with Legal and Privacy teams.

  • Information Security Manager at Materialise
    Jul 2012 - Aug 2017 · 5 yrs 2 mos

    Founded and led the organization-wide information security vision for a global leader in 3D printing across 20 offices worldwide. I was responsible for securing multi-year investment by aligning security maturity with business risk. Key Achievements: * Framework Implementation: Designed an Enterprise Security Architecture (SABSA) and established an ISMS based on ISO 27001, NIST, and HIPAA. * Global Maturity: Managed security improvement programs across the US, Europe, and Asia, developing key maturity metrics for executive reporting. * Compliance Oversight: Coordinated all third-party audits and penetration tests to maintain global compliance for SOX and GDPR.

  • Head of Project Management Office at SITRONICS IT
    Jun 2006 - Dec 2011 · 5 yrs 7 mos

  • Head of Project Management at Ciklum
    Sep 2005 - May 2006 · 9 mos