Information Security Senior Manager
Position Summary
The primary duties of the Information Security Senior Manager are to manage key functions and supporting services that are an integral part of the larger program to secure and protect our GridSure platform. GridSure is UIG’s remote engineering, operations, maintenance, and dispatch platform and is utilised by UIG’s utility, energy, microgrid, and data center customers. Implementing and managing a strong program to ensure compliance with customer and regulatory requirements is a cross-functional effort requiring an experienced Manager and will require expertise in information security, along with great communication skills.
The Senior Manager will work cross-functionally with Engineering, IT, Legal, Product, HR, and Supply Chain teams. As the technical authority on cybersecurity, this role is responsible for defining and upholding the IT/OT reference architecture, policies, standards, and guidelines. They will work closely with the engineering teams to bring GridSure equipment from concept to initial design, into production, and throughout the product lifecycle. The Information Security Senior Manager will report to the VP of Engineering.
Key Responsibilities
- Design, develop, and maintain IT/OT security policies and controls
- Guide activities related to compliance with cybersecurity frameworks such as NIST CSF, NERC CIP, and others, as appropriate to meet customer requirements
- Produce and maintain OT asset inventories and overall knowledge and documentation of the US and International OT architecture
- Perform analysis of the architecture and infrastructure of GridSure control systems (PLC/SCADA/DCS/IIoT/Protective Relaying) in the context of cybersecurity
- Identify, assess, and report the overall OT cybersecurity risk landscape within the US and International regions
- Conduct regular vulnerability assessments to evaluate cyber risks to the OT environment, including partnering with stakeholders and scoring performance
- Develop clear, well-written, and concise communication for UIG employees with timely and appropriate recommendations to respond to security and compliance threats, vulnerabilities, and other risks
- Act as subject matter expert for the security of the GridSure platform, systems, risk posture, and cyber resilience●
- Maintain knowledge and awareness of current and emerging threats and attack vectors in the OT environment and recommend and develop effective controls to detect and protect against those risks
- Summarise data and report on test results
- Assist in implementing, maintaining, and supporting the GridSure networks used to monitor, analyze, and control
- Ensure schedules and milestone dates are achieved
- Provide coordination and documentation for internal UIG teams
- Demonstrate continuous effort to improve operations, decrease turnaround times, streamline work processes, and work cooperatively and jointly to provide quality engineering designs
- Communicate orally in the English language with engineers, drafters, and manufacturing personnel via phone and face-to-face
- The candidate is a great collaborator and contributor
- Own Program Level support efforts
Required Qualifications
- Bachelor’s degree in Engineering, Computer Science, Cyber Security, Physics, or a
- related technical field from an accredited university
- 10+ years of experience in related cybersecurity and SCADA integration
- Experience in Energy & Utilities
- Demonstrated strong leadership and influence skills
- Prior experience with vulnerability and compliance management
- Be able to travel up to 25% of the year
Knowledge, Skills, and Abilities
- Experience working in and leading a 24/7/365 Security Operations Center
- Experience managing incident response processes for both large and small-scale incidents
- Ability to communicate effectively with both technical and non-technical individuals
- Proficient with Microsoft Office suite
- Experience with Cybersecurity Tools
- Occasionally assist in moving materials and equipment that weigh ~40lbs
- Manual dexterity to operate digital equipment, including computers and machine controllers
- Occasional exposure to and requirement to work around electrical testing and other industrial processes