Director, Cybersecurity

An established organization within the energy infrastructure sector is seeking a Director of Cybersecurity to lead its broader corporate cybersecurity function.

The position is being established through an organizational restructuring that separates corporate cybersecurity responsibilities from dedicated operational technology leadership.

This individual will take ownership of cybersecurity risk management, regulatory and compliance remediation, third-party security coordination, and the development of a three-year cybersecurity roadmap.

The Director will also manage a Cybersecurity Engineer and collaborate with OT stakeholders on facility-related risk assessments and security requirements.

RESPONSIBILITIES

• Lead corporate cybersecurity risk management initiatives.
• Develop and maintain a three-year cybersecurity roadmap.
• Identify and prioritize cybersecurity risks and remediation activities.
• Coordinate cybersecurity-related regulatory and compliance initiatives.
• Establish and maintain third-party security relationships.
• Work with operational technology stakeholders on facility risk assessments, SCADA considerations, and new-facility cybersecurity requirements.
• Manage and guide a Cybersecurity Engineer.
• Strengthen cybersecurity reporting and communication.
• Support plant-related cybersecurity coordination when needed.

Role Requirements

• Cybersecurity program leadership experience.
• Strong cybersecurity risk management and assessment background.
• Experience managing cybersecurity remediation efforts.
• Regulatory and compliance-related cybersecurity experience.
• Third-party security relationship management.
• Cybersecurity strategy and planning capabilities.
• Experience leading technical security personnel.
• Effective cross-functional communication and stakeholder management.
• Ability to work onsite three days per week in Silver Spring, Maryland.

PREFERRED EXPERIENCE

• Energy, utilities, or power generation industry experience.
• Operational technology security familiarity.
• Experience with SCADA environments or industrial cybersecurity requirements.