Cyber Security Manager

Responsible for managing, overseeing and coordinating activities of Cyber Security Center (CSC) personnel and implementing security assessment and incident response protocols. Coaches personnel on technical issues and verify compliance of CSC policies to ensure all components function optimally. Establishes and maintains metrics to assist in providing a high level of productivity, supportability, and operational readiness while also participating in project planning activities including, but not limited to, infrastructure enhancements and change management controls.

Tri-State recognizes the value of a highly-engaged and committed workforce and provides an excellent benefits program that includes:

Medical Insurance, Dental Insurance, Vision Insurance, Health Savings Account (HSA), Flexible Spending Accounts (FSA), Tuition Reimbursement, Flexible Work Schedules including compressed work week and telecommuting opportunities to work remotely up to 40%, Life Insurance, 401K, Long Term Disability (LTD), Short Term Disability (STD), Employee Assistant Program (EAP) and Paid Leave Benefits.

Cyber Security Center Manager

Hiring Salary Range: $131,000-$170,000

Actual compensation offer to candidate may vary outside of the posted hiring salary range based upon work experience, education, and/or skill level.

Responsibilities:

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

- Provide first line supervision to direct reports.

- Develop and administer CSC processes and review their application to ensure that CSC’s controls, policies, and procedures are operating effectively.

- Provide oversight for the identification, triage and response of events or incidents of apparent security breaches.

- Produce and review aggregated performance metrics.

- Supervise and increase the effectiveness and efficiency of the CSC, through improvements to each function as well as coordination and communication between support and business functions.

- Play a significant role in long-term CSC strategy and planning, including initiatives geared toward operational excellence, threat intelligence integration, automation, AI-driven threat detection, and risk management.

- Because Tri-State is an electric utility with continuous service obligations to its customers, regular, reliable, and predictable performance of the essential functions and responsibilities is an essential function of the job.

- Because Tri-State has an obligation to provide continuous, reliable electric service to its customers, the ability to work overtime at any time of the day or week is considered an essential function of the job.

OTHER DUTIES/RESPONSIBILITIES

- Perform other related duties as assigned

SUCCESS FACTORS/JOB COMPETENCIES:

- Leadership: ability to identify functional cyber security needs and establish goals and objectives and ensure alignment with enterprise goals.

- Planning: ability to think ahead and plan upcoming initiatives including prioritizing workload, developing schedules and meeting deadlines.

- Decision Making: ability to weigh options, consider alternatives and forecast outcomes and determine option which is best for the enterprise. Understand how to balance emotion with reason and make decisions that positively impact themselves, their employees, their customers and stakeholders, and their organizations. Ability to make decisions in difficult situations.

- Influence: ability to build impactful cross-functional department relationships to expand the security culture.

- Accountability: metrics-driven (KPIs) for mean time to detect / respond, phishing resilience, and other security criteria.

- Management/Supervision: ability to organize and manage multiple priorities and supervise work of assigned staff, including projects and daily activities.

- Time management: ability to prioritize and schedule projects and meet deadlines.

- Demonstrate behavior consistent with company values.

- Conduct problem analysis and problem resolution at both strategic and functional levels.

- Excellent interpersonal and communication skills

- Strong team player accomplishes tasks by working with others and being a good team player. Recognizes how his/her decisions may impact others; seeks input from others.

Qualifications:

Education and Training:

- Bachelor's Degree in Computer Science, Information Technology or related discipline, or equivalent combination of education and experience.

- One or more of the following active certifications:

- Certified Information Systems Security Professional (CISSP)

- GIAC Information Security Professional (GISP)

Knowledge, Skills, and Ability:

- Ability to lead with a proven track record in leading information security teams and technologies.

- Have a general knowledge of cyber security regulations and privacy laws.

- Excellent people-management skills.

- Good technical and trouble-shooting ability.

- Ability to work in a high stress environment.

- Ability to interact with staff, peers, and business units on a technical and professional level.

- A thorough understanding of customer service-related performance metrics.

- Experience in crisis management.

- Working knowledge of large-scale computer systems, networks and client/server, and virtual environments.

- Working Knowledge of industry regulations pertinent to the use of technology within Electric Utilities, such as North American Electric Reliability Corporation/Critical Infrastructure Protection (NERC/CIP).

- In-depth knowledge of modern datacenter technology and networking trends, including local and wide area networking, storage and backup systems, enterprise server platforms and operating systems, virtualization, security, and enterprise management/monitoring applications.

- A high level of expertise in communication, with the ability to adjust information delivery and content to a variety of audiences with varying technical backgrounds.

- Ability to maintain confidentiality.

Experience

- Eight (8) or more years of experience within Information Security, preferably with experience in supporting a dynamic, enterprise computing environment or related technical profession.

- Three (3) years of supervisory experience or equivalent experience serving in a leadership role.

- Experience with budget preparation, analysis and administration.

DESIRED JOB QUALIFICATIONS

- One or more of the following certifications preferred:

- Certified Information Systems Auditor (CISA)

- Security Essentials – SEC401 (GSEC certification)

- Advanced Security Essentials – SEC501 (GCED certification)

- Intrusion Detection In Depth – SEC503 (GCIA certification)

- GIAC Strategic Planning, Policy, and Leadership (GSTRT)

- Project management experience.

- Advanced Degree in Computer Science, Information Technology or related discipline.

- Experience in Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems.

- Experience in Artificial Intelligence (AI) / Machine Learning (ML) based security solutions

- Experience in multiple technical and business disciplines.