Generac Power Systems
Cyber Security Manager
Generac Power Systems, Waukesha, Wisconsin, United States, 53188
We are Generac, a leading energy technology company committed to powering a smarter world.
Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
The Manager Cyber Security is responsible for working with key stakeholders in IT and the business to drive and manage multiple initiatives supporting the Cyber Security strategic roadmap. Works with process and control owners to design, implement, and optimize the measurement of cybersecurity controls, support IT Risk Management programs. Supports Generac’s IT Risk Register and support programs to effectively mitigate cybersecurity risks. Provides technical guidance around system vulnerabilities and the necessary prioritization and remediation, supporting the M&A process to evaluate the security posture of M&A targets, and other security operations initiatives. Supports and guides junior resources on a variety of initiatives, including 3rd party risk, PCI compliance, supporting financial and regulatory compliance requirements and audits, risk identification/quantification/tracking, and internal compliance assessments to company policies and standards built upon industry frameworks such as NIST CSF and ISO 27001. This position reports to the Director Cyber Security.
Major Responsibilities:
Works closely with Cyber Security team members, as well as key stakeholders in IT and the business on the following:
Manage Risk Register process, including population and quantification of risks, coordinating with assigned owners on remediation plans and timelines, and reporting to stakeholders and leadership.
Manage process and key stakeholders in identification and prioritization of system vulnerabilities and remediation plans.
Support M&A activities to evaluate IT and security posture of target entities.
Manage operational gap assessments against published policies and standards, and work with key stakeholders to develop and prioritize remediation plans where necessary.
Work with stakeholders in the business to manage third party risk, through process enhancements as well as through use of current and future security tools. Understand business objectives to tailor third party risk objectives accordingly.
Manage process to identify compliance efforts needed to meet regulatory and industry requirements, including but not limited to SOX, PCI, NERC-CIP, Data Privacy, and others as necessary.
Drive ongoing enhancements to metrics reporting process.
Provide coaching and guidance to junior team members, supporting upskilling of broader Cyber Security team.
Support Cyber Security roadmap initiatives.
Minimum Job Requirements:
Bachelor’s degree with focus in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent experience
10 years of experience in Information Technology, IT Audit, Risk Management, and/or Governance and Compliance. Experience can be reduced to as low as 8 years if work experience includes a manager role within an industry leading consulting or auditing firm.
Preferred Qualifications:
CISA/CISM/CISSP or equivalent
Experience managing a cybersecurity function, running external or internal audits, and/or as a Compliance Manager coordinating with control owners and audit teams.
Experience managing direct reports, as well as leading cross-functional global teams through influence.
Experience with industry security best practices and control frameworks, including but not limited to NIST CSF, ISO 27001, GDPR.
Knowledge / Skills / Abilities:
Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization.
Strong understanding of IT and business processes, with the ability evaluate and/or implement IT controls and processes to manage cyber risks within those business processes.
Strong analytical and problem-solving skills, with the ability to identify potential risks and develop effective solutions.
Office Environment: While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion, the incumbent may be required to stoop, bend, or reach above the shoulders. The employee must occasionally lift up to 25 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision, and the ability to adjust focus. Occasional travel.
Great Reasons to work for Generac:
Competitive Benefits: Health, Dental, Vision, 401k and many more
State-of-the-art facility with an onsite gym, walking trails, café, free parking and many employee activities
Scheduled events throughout the year that allow our employees, both current and retirees, to gather together and enjoy their time with their families and co-workers
(Eligible for summer hours! (Memorial Day – Labor Day)
Pride! When a storm strikes, Generac employees always rise to the occasion. Each time a storm hits many employees volunteer their time with the customer support team or on the production line while others go right into storm-affected areas to repair generators
We believe in having fun. From minor celebrations to major events, our employees balance their work by building a strong culture of teamwork and collaboration through a variety of occasions, including our Fun Days.
Every day is Jeans Day! Dress for your day.
Product loan and discount programs
Physical Demands: While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee must occasionally lift up to 25 - 50 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision and ability to adjust focus. Occasional travel.
“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.”
Our success is directly tied to our employees’ professional growth and personal well-being, combined with strong families and communities. As an inclusive workplace, our employees embrace diversity, celebrate differences, and treat others with equality and respect.
Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
As one of the leaders and largest suppliers of power generation equipment and technology, the work we do touches millions of lives. Employees at Generac are encouraged to be innovative and are valued as an integral part of our global team. Our challenging goals develop knowledgeable employees dedicated to helping continue Generac’s success. Generac provides individuals the opportunity to work in a fast-paced agile work environment where their work makes a difference in people’s lives and their own.
Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
The Manager Cyber Security is responsible for working with key stakeholders in IT and the business to drive and manage multiple initiatives supporting the Cyber Security strategic roadmap. Works with process and control owners to design, implement, and optimize the measurement of cybersecurity controls, support IT Risk Management programs. Supports Generac’s IT Risk Register and support programs to effectively mitigate cybersecurity risks. Provides technical guidance around system vulnerabilities and the necessary prioritization and remediation, supporting the M&A process to evaluate the security posture of M&A targets, and other security operations initiatives. Supports and guides junior resources on a variety of initiatives, including 3rd party risk, PCI compliance, supporting financial and regulatory compliance requirements and audits, risk identification/quantification/tracking, and internal compliance assessments to company policies and standards built upon industry frameworks such as NIST CSF and ISO 27001. This position reports to the Director Cyber Security.
Major Responsibilities:
Works closely with Cyber Security team members, as well as key stakeholders in IT and the business on the following:
Manage Risk Register process, including population and quantification of risks, coordinating with assigned owners on remediation plans and timelines, and reporting to stakeholders and leadership.
Manage process and key stakeholders in identification and prioritization of system vulnerabilities and remediation plans.
Support M&A activities to evaluate IT and security posture of target entities.
Manage operational gap assessments against published policies and standards, and work with key stakeholders to develop and prioritize remediation plans where necessary.
Work with stakeholders in the business to manage third party risk, through process enhancements as well as through use of current and future security tools. Understand business objectives to tailor third party risk objectives accordingly.
Manage process to identify compliance efforts needed to meet regulatory and industry requirements, including but not limited to SOX, PCI, NERC-CIP, Data Privacy, and others as necessary.
Drive ongoing enhancements to metrics reporting process.
Provide coaching and guidance to junior team members, supporting upskilling of broader Cyber Security team.
Support Cyber Security roadmap initiatives.
Minimum Job Requirements:
Bachelor’s degree with focus in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent experience
10 years of experience in Information Technology, IT Audit, Risk Management, and/or Governance and Compliance. Experience can be reduced to as low as 8 years if work experience includes a manager role within an industry leading consulting or auditing firm.
Preferred Qualifications:
CISA/CISM/CISSP or equivalent
Experience managing a cybersecurity function, running external or internal audits, and/or as a Compliance Manager coordinating with control owners and audit teams.
Experience managing direct reports, as well as leading cross-functional global teams through influence.
Experience with industry security best practices and control frameworks, including but not limited to NIST CSF, ISO 27001, GDPR.
Knowledge / Skills / Abilities:
Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization.
Strong understanding of IT and business processes, with the ability evaluate and/or implement IT controls and processes to manage cyber risks within those business processes.
Strong analytical and problem-solving skills, with the ability to identify potential risks and develop effective solutions.
Office Environment: While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion, the incumbent may be required to stoop, bend, or reach above the shoulders. The employee must occasionally lift up to 25 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision, and the ability to adjust focus. Occasional travel.
Great Reasons to work for Generac:
Competitive Benefits: Health, Dental, Vision, 401k and many more
State-of-the-art facility with an onsite gym, walking trails, café, free parking and many employee activities
Scheduled events throughout the year that allow our employees, both current and retirees, to gather together and enjoy their time with their families and co-workers
(Eligible for summer hours! (Memorial Day – Labor Day)
Pride! When a storm strikes, Generac employees always rise to the occasion. Each time a storm hits many employees volunteer their time with the customer support team or on the production line while others go right into storm-affected areas to repair generators
We believe in having fun. From minor celebrations to major events, our employees balance their work by building a strong culture of teamwork and collaboration through a variety of occasions, including our Fun Days.
Every day is Jeans Day! Dress for your day.
Product loan and discount programs
Physical Demands: While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee must occasionally lift up to 25 - 50 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision and ability to adjust focus. Occasional travel.
“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.”
Our success is directly tied to our employees’ professional growth and personal well-being, combined with strong families and communities. As an inclusive workplace, our employees embrace diversity, celebrate differences, and treat others with equality and respect.
Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
As one of the leaders and largest suppliers of power generation equipment and technology, the work we do touches millions of lives. Employees at Generac are encouraged to be innovative and are valued as an integral part of our global team. Our challenging goals develop knowledgeable employees dedicated to helping continue Generac’s success. Generac provides individuals the opportunity to work in a fast-paced agile work environment where their work makes a difference in people’s lives and their own.