Director, Security & Infrastructure

155400-194100 per year Tucker, GA, USA Salary Full Time This position provides the strategic direction and leadership for GSOC supporting GSOC, the EMCs, and FOC including responsibility for Cyber Security, Physical Security, and Cyber), Operational Technology Infrastructure functions. Works across functional areas to develop and implement a operational strategy that supports the goals and vision of the organization. Responsible for overall corporate compliance with all NERC CIP standards. Ensures staff compliance with all applicable laws, regulations, industry standards, corporate policies, guidelines, and procedures, including but not limited to, RUS, OSHA, NERC, FERC and ITS requirements. Promotes an environment of compliance and continuous improvement to meet the Corporation's goals and objectives. Job Duties: Provides direction and leadership in the performance of Cyber Security and Physical Security functions ensuring overall compliance and security of all supported systems. This includes monitoring industry trends and research & development as well as developing and implementing policies, systems, standards, and work processes. Provides direction and leadership in the performance of GSOC's Operational Technology Infrastructure ensuring related system performance and maintenance are sufficient for the support of real-time operations. This includes monitoring industry trends and research & development as well as developing and implementing policies, systems, standards, and work processes. Provides direction and leadership in the performance of the Power Technology Process Management functions ensuring processes are documented and operationalized through leveraging technology such as automation, Sharepoint, or ITSM. This includes monitoring industry trends and research & development as well as developing and implementing policies, systems, standards, and work processes. Provides direction and leadership to related Strategic Programs; such as Proactive Internal Audits, Penetration Testing, NERC CIP Program (GSOC and GTC), Cyber Safe Alerts, and Internal Threat Programs. Represents the Corporation's interests in technology issues both internal and external to the Corporation, including contracts, issues, and negotiations involving FOC functional departments, Members, Integrated Transmission System (ITS) Participants, regulatory agencies (FERC, NERC, SERC), contractors, vendors, and other utilities. Creates, implements, and maintains an environment of compliance and continuous improvement across the corporation as it relates to security and technology. Provides strategic, audit, and regulatory support and assistance to Executive Management as requested. Provides leadership and support during activation of Conservative Operations, Disaster Recovery, Business Continuity, and the Security Incident Response and Recovery Plans. Required Qualifications: Education : Bachelor's degree in Cyber Security, Engineering, Computer Science, Business Administration, or related field. Experience : 12 years in Cyber Security, Engineering, Computer Science, Business Administration ore related field with at least 5 years in a management or leadership role. Equivalent Experience : Associate's degree in Cyber Security, Engineering, Computer Science, Business Administration or related field with at least 18 years of experience with cyber security, industrial control systems, communications, energy management systems, or security with an electric utility, at least 10 years of which in a management or leadership role. Licenses, Certifications, and/or Registrations : Professional Engineering License desired. Specialized Skills : Strong verbal and written communication skills. Proven ability to quickly adapt and lead cross-functional/organizational change with confidence. Demonstrated ability to make decisions using a risk framework with incomplete information and a bias toward action. Excellent problem solver coupled with a proven ability to lead groups involved in fast paced, high-pressure environments. Must be able to successfully pass a NERC CIP Personnel Risk Assessment.