Section Manager, Cyber & Physical Security

Overview

The Section Manager is responsible for day-to-day oversight and long-term development of employees in the Cyber Security and Physical Security Groups. This position is responsible to ensure compliance with NERC Critical Infrastructure Protection Standards that are applicable to Substation Operations. This position will develop and support the systems and processes intended to secure substation cyber assets including microprocessor relays, SCADA systems, HMI's, etc. In addition, this position works in collaboration with Corporate Security to ensure the physical security of substations by implementing systems such as security fences, video cameras, card swipes, motorized gates and the contract guard services as necessary. The Section Manager will ensure all internal and external audit requests are completed in a timely manner.

- Environmental & Safety Compliance: Ensure all safety policies and procedures are followed and enforced and provide the needed leadership around promoting good housekeeping practices and the use of HPI while in the office or on field visits. Ensure compliance with environmental rules and regulations.

- Directly responsible for NERC CIP compliance for Substation Operations. This position is expected to be an SME in NERC CIP standards as they relate to Substation Operations.

- Directly responsible for cyber and physical security of all Con Edison area and transmission substations.

- Oversee system analysts and other employees responsible for working with Protection & Control Engineering during the scoping and design phases of projects to ensure CIP compliance and security best practices.

- Collaborate with PST areas and Technical Applications Group to facilitate protection of cyber assets by adhering documented workflows.

- Review and support development of PSTs O&M budget as well as applicable capital budgets related to security projects.

- Ensure all engineering cyber tickets are processed accurately and in a timely fashion.

- Collaborate with IT and Corporate Security on implementation of security best practices in substations.

- Develop comprehensive and accurate response to all internal and external CIP audits.

- Represent the department on various Company and professional technical committees, e.g. NATF, IEEE, NERC, etc.

- Support PSTs field activities as well as the Powerbase workflow for settings management.

- Facilitate compliance with any future NERC standards relating to CIP and external routability.

- Ensure compliance with company employment opportunity and affirmative actions policies.

- Ensures implementation of Company safety, health and environmental programs for employees whose work is directed.

- Ensures that safe work practices are followed and the environment is fully protected in accordance with Company policy and governmental regulations.

- Must be committed to fostering a Zero Accident Culture, Diversity and Inclusion, Achieving Operational Excellence and Developing an effective Cost Management Culture and Enhancing customers experience.

- Will perform other related departmental assignment as needed.

Qualifications

Required Education/Experience

- Bachelor's Degree In Information Technology, Computer Science, Cyber Security, Engineering or MBA Degree and 8 years of work experience as having direct supervision over technical areas in IT, cybersecurity or the energy industry. or

- Master's Degree In Information Technology, Computer Science, Cyber Security, Engineering or MBA Degree and 6 years of work experience as having direct supervision over technical areas in IT, cybersecurity or the energy industry.

Preferred Education/Experience

- Bachelor's Degree Information Technology, Computer Science, Cyber Security and 8 years of work experience in NERC CIP program implementation, administration and compliance.

- Master's Degree Information Technology, Computer Science, Cyber Security and 6 years of work experience in NERC CIP program implementation, administration and compliance.

Relevant Work Experience

- Extensive supervisory experience and skills to administer and direct both professional and non professional employees regarding cyber and physical security systems and processes. Required

- Must be able to exercise independent judgment and possess the ability to render sound business decisions. Required

- Must be well organized, detailed oriented, flexible to handle multiple assignments and meet deadlines. Required

- Must possess superior oral and written communication skills and initiative to champion change and have the ability to influence others in order to improve the management process. Required

- Must be able to deliver exemplary customer service and develop a team spirited work environment in support of Con Edison's corporate values and mission. Preferred

Licenses and Certifications

- Driver's License Required

Physical Demands

- Ability to respond to system emergencies

- Able to work in all weather conditions, i.e. excessive heat and/or cold

- Ability to work in adverse conditions that include, noise, confined spaces, and high elevations

- Ability to climb ladders and stairs

- Ability to work on elevated platforms, scaffolds, catwalks, roofs, and/or other equipment

- Ability to work in inclement weather and adverse conditions (i.e., excessive heat, cold, noise, confined spaces)

- Ability to work with, and in, the vicinity of high voltage and/or other high-energy systems

- Ability to travel to company locations to work on storm restoration and heat contingencies

Additional Physical Demands

- The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.

- The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.