Director, OT Operations, Cybersecurity, Governance

Job not on LinkedIn

🔥 11 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cypress Creek Renewables

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

⚡ Energy

💰 Debt Financing on 2022-05

Energy • Sustainability

Cypress Creek Renewables is a leading company in the American clean energy industry, dedicated to developing, financing, owning, and operating solar and energy storage projects across the United States. With a total of over 12GW in solar energy projects developed, the company plays a crucial role in the clean energy transition, powering more than 2,000,000 American homes. Cypress Creek Renewables is committed to sustainability, working closely with communities to provide long-term renewable energy solutions. The company offers operations and maintenance services as well, ensuring that their solar projects remain beneficial for decades to come. Their investment of over $3 billion into projects highlights their significant impact and dedication to building a sustainable future.

📋 Description

• Define and execute a multiyear OT strategy and roadmap aligned with fleet growth, operational priorities, cybersecurity risk, and business objectives • Establish the OT operating model, service ownership, decision rights, accountability, and performance expectations across internal teams and service providers • Lead, mentor, and develop multidisciplinary OT operations, engineering, governance, and cybersecurity personnel • Develop annual operating and capital budgets, business cases, staffing plans, and investment priorities • Prioritize initiatives using risk, reliability, lifecycle condition, regulatory obligations, cost, and business value • Provide executive-level reporting on OT strategy, financial performance, resource needs, material risks, and delivery milestones • Own the OT cybersecurity program, control framework, roadmap, and risk-based priorities • Direct asset inventory, network segmentation, vulnerability management, secure configuration, patching, endpoint protection, and security monitoring • Establish identity, privileged access, multifactor authentication, vendor remote access, removable media, and transient cyber asset requirements • Lead OT cyber incident preparedness, response, escalation, communications, lessons learned, and corrective-action tracking • Coordinate threat intelligence, detection engineering, security monitoring, and response workflows with enterprise cybersecurity and site operations • Measure and communicate cybersecurity maturity, control effectiveness, exposure trends, remediation progress, and residual risk • Oversee NERC CIP, O&P, and internal compliance obligations; translate requirements into procedures, controls, evidence standards, and operating routines • Maintain audit-ready documentation and evidence; lead readiness assessments, internal reviews, auditor or regulator engagement, evidence requests, and remediation planning • Establish and maintain an OT risk-management framework, risk register, control library, exception process, and accountable risk owners • Facilitate risk assessments for sites, systems, projects, vendors, architecture changes, acquisitions, and emerging threats • Define remediation plans, compensating controls, target dates, escalation criteria, and risk-acceptance requirements • Align OT governance with NIST CSF and NIST SP 800-82 • Direct day-to-day delivery of SCADA, control systems, OT networks, servers, workstations, historians, communications, and supporting services • Establish service levels, operating procedures, on-call coverage, escalation paths, maintenance windows, and incident/problem-management practices • Govern change, configuration, release, capacity, availability, and lifecycle-management processes • Sponsor resilient architecture, tested backups, disaster recovery, continuity plans, redundancy, and restoration exercises • Coordinate commissioning, operational acceptance, documentation, support transition, and standardization for new or acquired assets • Drive root-cause analysis, corrective actions, technical-debt reduction, automation, and continuous improvement • Define security, service, documentation, support, resilience, notification, and access requirements for OT vendors and service providers • Lead technical due diligence, cybersecurity assessments, product selection, contract input, and onboarding for third parties and managed services • Govern vendor identities, privileged access, remote connectivity, session oversight, approval workflows, and timely access removal • Monitor service levels, control performance, vulnerabilities, end-of-life exposure, support quality, costs, and corrective actions • Ensure contracts address incident reporting, breach notification, evidence support, data handling, business continuity, and exit obligations • Maintain strategic supplier relationships and escalate material performance, cybersecurity, compliance, or delivery concerns • Partner with operations, engineering, asset management, IT, enterprise cybersecurity, compliance, legal, procurement, finance, and project delivery teams • Translate operational needs and technical risks into priorities, investment decisions, delivery plans, and executive recommendations • Support project design reviews, architecture decisions, commissioning, acquisitions, integrations, and operational handoffs • Facilitate governance forums that resolve competing priorities, approve exceptions, assign accountability, and remove delivery barriers • Define performance, risk, control, service, reliability, recovery, financial, and delivery indicators • Establish dashboards and reporting cadences for operational and executive stakeholders • Monitor availability, incidents, vulnerabilities, patch status, backup success, recovery testing, lifecycle exposure, and remediation performance • Conduct control testing, service reviews, maturity assessments, post-incident reviews, and independent assurance activities • Validate corrective actions and use performance and risk trends to drive investment, resource allocation, process improvement, and roadmap adjustments

🎯 Requirements

• Advanced technical degree in fields such as engineering, computer science, information systems, or a related technical field • 10+ years of relevant experience, including 5+ years of leadership, in OT operations, ICS/SCADA, industrial cybersecurity, or critical infrastructure technology • Demonstrated experience leading technical teams, managing vendors and budgets, and delivering multiyear operational or cybersecurity programs across distributed facilities • Experience overseeing technical and regulatory teams and programs, along with elevating program maturity • Proven success in implementing and maintaining regulatory compliance programs • Knowledge of NERC processes and ability to oversee audits and data requests • Experience establishing governance, risk management, change control, compliance evidence, and tested business continuity and disaster recovery processes • Ability to translate technical and operational risks into executive decisions, build cross-functional alignment, and balance cybersecurity, reliability, cost, and business priorities • Ability to embrace and live by the mission and values of Cypress Creek Energy • Preferred: Leadership experience supporting ICS/SCADA or OT environments in solar, storage, wind, utilities, or other distributed energy infrastructure • Preferred: Experience leading NERC CIP and O&P compliance support, evidence readiness, and audit remediation • Preferred: Familiarity with NIST 800-82 and NIST CSF • Preferred: Experience selecting and governing comparable OT/cybersecurity tools, including vendor evaluation, service integration, and lifecycle planning • Preferred: Relevant certifications such as CISSP, CISM, CRISC, GICSP, or CEH

🏖️ Benefits

• 15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays • 401(k) Match • Comprehensive package including medical, dental, vision and health insurance • Wellness stipend • Family planning stipend • Generous parental leave • Tuition Reimbursement • Phone Bill Reimbursement • Company Swag • Professional growth opportunities • Opportunities to take ownership, expand expertise, and advance your career

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume