Director Cybersecurity Operations

About the position The Director, Cybersecurity Operations leads the development, implementation, and ongoing coordination of enterprise-wide cybersecurity operations, including Threat Engineering, Threat Detection, Cybersecurity Industry Threats Coordination, Endpoint Security, Network Security, Email Security, the Security Operations Center (SOC), Threat Analysis and Incident Response, Cybersecurity Logging & Monitoring, Vulnerability Management, Application Security, Data Security, Insider Trust, Threat Intelligence, and Cyber Threat Hunting. (S)he coordinates across all business lines, service departments, and external risk organizations (e.g. Law Enforcement, cross-sector cyber industry trade organizations) and peer energy companies. As PSEG's senior leader responsible for cybersecurity operations, (s)he will also be responsible for defining and aligning cybersecurity policies, strategy, and standards, and for governing actual cybersecurity operations, including overseeing an internal SOC and managed service provider, and for maintaining an Incident Response program to ensure appropriate responses to cybersecurity incidents. During an incident, (s)he will be designed as lead cyber incident commander and will be responsible for the containment, eradication, and recovery, as applicable. (S)he will be responsible for multiple discrete projects/enhancements to build, maintain, and mature capabilities, including people, processes, and technologies. (S)he will engage across the entire IT, OT, and managed services landscapes, including leading a team across these environments.

Responsibilities

• Directs, coaches, and counsels internal/external cyber resources on Cybersecurity technologies.
• Ensure that Cybersecurity Operations service delivery aligns with the corporate IT strategy.
• Develops and implements best practices for PSEG Cybersecurity Operations capabilities.
• Partners with and advises various IT teams.
• Builds relationships across PSEG business and technology teams.
• Develops, manages, and pre-prioritizes Cybersecurity CAPEX and OPEX budgets.
• Leads team, including performance evaluations and career development guidance.

Requirements

• Bachelors degree and 10 years of relevant cybersecurity experience, including leadership experience.
• Demonstrated strong leadership and influence skills.
• Demonstrated strong presentation skills with the ability to present to all levels of management and executive leadership.
• Experience leading a 24x7x365 SOC/Cyber Fusion Center.
• Experience managing incident response processes for incidents of all sizes and impacts.
• Experience with Red Teams and with Table Top Exercises.
• Experience with Vulnerability Management.
• Strong knowledge of Application Security tools and concepts.
• Proven working experience in Security Analysis, Threat Intelligence, Email Security, and/or Endpoint Security.
• Experience with Penetration Testing.
• Executive teamwork, facilitation, relationship building, and negotiation skills.
• Ability to maintain positive working relationships both as a leader and as a team member.
• Effective time management and multitasking skills.
• Ability to communicate effectively with both technical and non-technical individuals.
• Strong interpersonal communication skills, analytical abilities, detail focused, quality focused, and problem-solving skills.
• A demonstrated ability to integrate various cybersecurity, network and data protection technologies and controls into a cohesive solution.
• Demonstrated experience in enterprise solutions and implementation of technology and process solutions.
• Significant experience in cybersecurity, including hands on experience in SIEM, Email Security, and Endpoint Security tools.
• Demonstrated experience in delivering comprehensive solutions to complex cybersecurity issues on a global scale.
• Confidence in leading diverse matrix teams independently.
• Strong knowledge of Threat Intelligence frameworks (e.g. MITRE ATT&CK).
• Department of Energy's regulation 10 CFR 810 is required.

Nice-to-haves

• Industry Cybersecurity certifications (e.g. CISSP, CEH, etc.).
• Masters in Information Security, Computer Science, Business, Engineering, or related fields.
• Experience in Electric or Gas Utility or Power Generation industry, and/or experience in manufacturing.
• Broad knowledge of IT and related control environments.

Benefits

• Medical, dental, vision insurance.
• Parental leave and family leave programs.
• Behavioral health programs.
• 401(k) with company match.
• Life insurance.
• Tuition reimbursement.
• Generous paid time off.

Apply tot his job Apply To this Job