ABOUT AVANTUSAvantus develops, owns, and operates utility-scale clean energy projects across California and the Desert Southwest. Our development pipeline represents one of the nation's largest portfolios of solar with integrated storage, capable of providing dispatchable power to 17 million Americans, day and night. With over a decade of industry leadership and strategic investment from KKR and EIG, Avantus delivers affordable, reliable clean energy solutions that meet America’s growing energy demand. ABOUT THE POSITIONThe Sr. Manager, Cybersecurity is responsible for leading the IT Cybersecurity function to ensure the scalable cybersecurity protection of the Avantus business as well as its growing portfolio of utility-scale clean energy operational power facilities. With support from the broader IT team as well as external resources, this person is the key responsible owner to manage and drive improvement for the IT &amp; OT Cybersecurity solutions that protect information assets, business systems, and networks. This role ensures compliance with regulatory and executive reporting requirements, mitigates risks, and leads incident response efforts. The role will collaborate with IT leadership, business stakeholders, and external partners to maintain a robust security posture across the enterprise.This role reports to the Vice President, Information Technology and Security. ESSENTIAL FUNCTIONS AND RESPONSIBILITIES <ul><li>Key responsible owner to maintain and improve the efficacy of our IT cybersecurity solutions, controls, procedures, and policies that support the security posture of the company.</li><li>Key responsible owner to respond to cybersecurity incidents, delegating investigation analysis and response to internal and external resourcing, as appropriate. Escalate incident response to leadership according to incident response plans, as appropriate.</li><li>Drive solutions implementations and systems changes, with the help of internal IT support staff and external consultants, as necessary. Organize and manage projects and the required resources from start to finish.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to continually develop the strategy and trajectory of the broader IT department and the systems that support the company.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to execute cybersecurity solution implementations and special projects in support of the broader maturity and scaling of the IT cybersecurity program and its supporting systems.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to develop controls, standards, best-practice, policy, and process that will streamline cybersecurity operations and help protect the business as we scale.</li><li>Lead the continued development and maturity and accuracy of security incident and event management (SIEM) systems, vulnerability management, security analytics, incident response, and other cybersecurity operational systems.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to strategically support broader IT infrastructure, systems, and cybersecurity initiatives.</li><li>Generate and maintain project trackers, reports, or dashboards as helpful and efficient to support the team. Collaborate with IT and business stakeholders to deliver to longer-term projects, successfully documenting and executing change plans, and executing rollouts of cybersecurity systems and features in line with IT department and company goals.</li><li>Stay on top of industry trends and new technologies as applicable and relevant to the business, including by leveraging access to various cybersecurity industry subscriptions, community networks, conferences and events, training platforms, and other resources, as supported by the company.</li><li>Mentor and provide collaborative cybersecurity guidance to IT team members and business stakeholders.</li></ul>IT Cybersecurity Program Management Responsibilities: <ul><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff and external resources, to ensure compliance with and continual improvement to applicable control standards and compliance and risk-management frameworks, for corporate and power generation project entities. Maintain and update risk registers and control remediation reporting for executive audiences.</li><li>Drive the development and ongoing maintenance of high-quality and consistent cybersecurity training resources, documentation, and runbooks. Work with IT staff to maintain up-to-date cybersecurity resources on the company Intranet and knowledge bases.</li><li>Drive the enhancement of both the quality and frequency of cybersecurity trainings and communications to the business, including templatized notifications, targeted trainings, table-top exercises, and standardized incident responses.</li><li>Monitor security operations and logging dashboards, as well as alerts to triage and escalate security incidents, with the ability to delegate to other IT team members or external resources as appropriate.</li><li>In collaboration with other senior IT team members, assist in the recurring audit responsibilities to maintain cybersecurity controls validation and remediation tracking.</li><li>In collaboration with cybersecurity consulting and solutions partners, as applicable, maintain features and functionality of cybersecurity solutions in a manner consistent with the needs of the business.</li><li>Oversee a risk-prioritized recurring testing program to validate effectiveness of security controls across the environment.</li><li>Proactively recommend improvements to controls to address security gaps and oversee the implementation and validation of approved recommendations.</li><li>Contribute to and influence the development, implementation, monitoring, and iteration of AI Governance &amp; Enablement strategies for the business.</li><li>Maintain and keep up-to-date external cybersecurity solutions support and service level agreements and provide recommendations for improvements where applicable.</li><li>Maintain and keep up-to-date licensing support agreements for cybersecurity systems. Assist with software renewals, license audits and cost governance, and upkeep of contract deadlines and vendor contact details within IT systems of record.</li><li>Adhere to responsible change management, documentation, and business continuity best-practice and process in coordination with and in support of all team members.</li><li>Work collaboratively with other IT team members, internal Avantus resources and stakeholders, and external IT solutions partners as one team to solve problems and develop solutions in support of our team and our business.</li></ul> REQUIRED SKILLS AND QUALIFICATIONS<ul><li>10+ years in IT security roles, ideally 5+ years specifically in cybersecurity leadership positions and/or managing IT Cybersecurity Operations and corresponding functions for the enterprise.</li><li>Proven experience developing and implementing enterprise security programs</li><li>Direct experience with NERC CIP Compliance standards and controls a strong plus.</li><li>Direct experience managing a program adhering to at least one leading industry-standard cybersecurity control framework is a requirement. Experience specifically with CIS, NIST, ISO or other frameworks a strong plus.</li><li>Proven experience implementing, administering, and supporting the enterprise cybersecurity cloud application and infrastructure stack.</li><li>Explicit experience securing Microsoft and AWS cloud infrastructures.</li><li>Skilled in incident response investigation analysis, cross-functional team triage, containment, recovery, post-incident review and root-cause analysis.</li><li>Security mindset and dedication to best-practice and continual improvement.</li><li>Service oriented, collaborative, and solution-driven mindset first and foremost.</li><li>Strong communication skills, attention to detail, and ability to self-organize while parallel-processing and driving projects to completion.</li><li>Experience with standard principles and practices of project management and budget development, work planning and organization.</li><li>Cybersecurity Certification such as CISSP, CISM, CCSP, or other equivalent certification highly preferred.</li><li>Explicit experience implementing AI governance for the enterprise is a strong plus.</li></ul> #LI-Hybrid<div><div><div>Avantus offers competitive compensation with an excellent benefits package, including 401(k) matching; comprehensive medical and dental plan options; and flexible PTO. We are an equal-opportunity employer. The base salary range for this full-time position is listed below (plus bonus and benefits). Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position in California. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for the applicable location during the hiring process. Please note that the compensation details listed reflect the base salary only, and do not include bonus and benefits. </div><div>Pay Range</div><div>$173,040—$203,576 USD</div></div></div>

Avantus is shaping the future by making reliable, low-cost clean energy a global reality. Our legacy of leadership in next generation solar energy includes developing one of the nation&rsquo;s largest solar clusters and one of the first projects to beat fossil fuel prices back in 2016. Today, we are expanding the boundaries of existing technologies to build one of the largest portfolios of smart power plants with integrated storage, capable of providing millions of people with affordable, zero-emission energy &ndash; day and night. Through our relentless pursuit of better, we are decarbonizing our planet at the gigaton level, and bringing the advantages of clean energy to all of us.

Sr. Manager, Cybersecurity

ABOUT AVANTUSAvantus develops, owns, and operates utility-scale clean energy projects across California and the Desert Southwest. Our development pipeline represents one of the nation's largest portfolios of solar with integrated storage, capable of providing dispatchable power to 17 million Americans, day and night. With over a decade of industry leadership and strategic investment from KKR and EIG, Avantus delivers affordable, reliable clean energy solutions that meet America’s growing energy demand.&nbsp;ABOUT THE POSITIONThe Sr. Manager, Cybersecurity is responsible for leading the IT Cybersecurity function to ensure the scalable cybersecurity protection of the Avantus business as well as its growing portfolio of utility-scale clean energy operational power facilities. With support from the broader IT team as well as external resources, this person is the key responsible owner to manage and drive improvement for the IT &amp; OT Cybersecurity solutions that protect information assets, business systems, and networks. This role ensures compliance with regulatory and executive reporting requirements, mitigates risks, and leads incident response efforts. The role will collaborate with IT leadership, business stakeholders, and external partners to maintain a robust security posture across the enterprise.This role reports to the Vice President, Information Technology and Security.&nbsp;ESSENTIAL FUNCTIONS AND RESPONSIBILITIES&nbsp;<ul><li>Key responsible owner to maintain and improve the efficacy of our IT cybersecurity solutions, controls, procedures, and policies that support the security posture of the company.</li><li>Key responsible owner to respond to cybersecurity incidents, delegating investigation analysis and response to internal and external resourcing, as appropriate. Escalate incident response to leadership according to incident response plans, as appropriate.</li><li>Drive solutions implementations and systems changes, with the help of internal IT support staff and external consultants, as necessary. Organize and manage projects and the required resources from start to finish.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to continually develop the strategy and trajectory of the broader IT department and the systems that support the company.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to execute cybersecurity solution implementations and special projects in support of the broader maturity and scaling of the IT cybersecurity program and its supporting systems.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to develop controls, standards, best-practice, policy, and process that will streamline cybersecurity operations and help protect the business as we scale.</li><li>Lead the continued development and maturity and accuracy of security incident and event management (SIEM) systems, vulnerability management, security analytics, incident response, and other cybersecurity operational systems.</li><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff, to strategically support broader IT infrastructure, systems, and cybersecurity initiatives.</li><li>Generate and maintain project trackers, reports, or dashboards as helpful and efficient to support the team. Collaborate with IT and business stakeholders to deliver to longer-term projects, successfully documenting and executing change plans, and executing rollouts of cybersecurity systems and features in line with IT department and company goals.</li><li>Stay on top of industry trends and new technologies as applicable and relevant to the business, including by leveraging access to various cybersecurity industry subscriptions, community networks, conferences and events, training platforms, and other resources, as supported by the company.</li><li>Mentor and provide collaborative cybersecurity guidance to IT team members and business stakeholders.</li></ul>IT Cybersecurity Program Management Responsibilities: <ul><li>Work closely with the Vice President of Information Technology &amp; Security, as well as other IT staff and external resources, to ensure compliance with and continual improvement to applicable control standards and compliance and risk-management frameworks, for corporate and power generation project entities. Maintain and update risk registers and control remediation reporting for executive audiences.</li><li>Drive the development and ongoing maintenance of high-quality and consistent cybersecurity training resources, documentation, and runbooks. Work with IT staff to maintain up-to-date cybersecurity resources on the company Intranet and knowledge bases.</li><li>Drive the enhancement of both the quality and frequency of cybersecurity trainings and communications to the business, including templatized notifications, targeted trainings, table-top exercises, and standardized incident responses.</li><li>Monitor security operations and logging dashboards, as well as alerts to triage and escalate security incidents, with the ability to delegate to other IT team members or external resources as appropriate.</li><li>In collaboration with other senior IT team members, assist in the recurring audit responsibilities to maintain cybersecurity controls validation and remediation tracking.</li><li>In collaboration with cybersecurity consulting and solutions partners, as applicable, maintain features and functionality of cybersecurity solutions in a manner consistent with the needs of the business.</li><li>Oversee a risk-prioritized recurring testing program to validate effectiveness of security controls across the environment.</li><li>Proactively recommend improvements to controls to address security gaps and oversee the implementation and validation of approved recommendations.</li><li>Contribute to and influence the development, implementation, monitoring, and iteration of AI Governance &amp; Enablement strategies for the business.</li><li>Maintain and keep up-to-date external cybersecurity solutions support and service level agreements and provide recommendations for improvements where applicable.</li><li>Maintain and keep up-to-date licensing support agreements for cybersecurity systems. Assist with software renewals, license audits and cost governance, and upkeep of contract deadlines and vendor contact details within IT systems of record.</li><li>Adhere to responsible change management, documentation, and business continuity best-practice and process in coordination with and in support of all team members.</li><li>Work collaboratively with other IT team members, internal Avantus resources and stakeholders, and external IT solutions partners as one team to solve problems and develop solutions in support of our team and our business.</li></ul>&nbsp;REQUIRED SKILLS AND QUALIFICATIONS<ul><li>10+ years in IT security roles, ideally 5+ years specifically in cybersecurity leadership positions and/or managing IT Cybersecurity Operations and corresponding functions for the enterprise.</li><li>Proven experience developing and implementing enterprise security programs</li><li>Direct experience with NERC CIP Compliance standards and controls a strong plus.</li><li>Direct experience managing a program adhering to at least one leading industry-standard cybersecurity control framework is a requirement. Experience specifically with CIS, NIST, ISO or other frameworks a strong plus.</li><li>Proven experience implementing, administering, and supporting the enterprise cybersecurity cloud application and infrastructure stack.</li><li>Explicit experience securing Microsoft and AWS cloud infrastructures.</li><li>Skilled in incident response investigation analysis, cross-functional team triage, containment, recovery, post-incident review and root-cause analysis.</li><li>Security mindset and dedication to best-practice and continual improvement.</li><li>Service oriented, collaborative, and solution-driven mindset first and foremost.</li><li>Strong communication skills, attention to detail, and ability to self-organize while parallel-processing and driving projects to completion.</li><li>Experience with standard principles and practices of project management and budget development, work planning and organization.</li><li>Cybersecurity Certification such as CISSP, CISM, CCSP, or other equivalent certification highly preferred.</li><li>Explicit experience implementing AI governance for the enterprise is a strong plus.</li></ul>&nbsp;#LI-Hybrid<div><div><div>Avantus offers competitive compensation with an excellent benefits package, including 401(k) matching;&nbsp;comprehensive medical and dental plan options; and flexible PTO. We are an equal-opportunity employer. The base salary range for this full-time position is listed below (plus bonus and benefits). Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position in California. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for the applicable location during the hiring process. Please note that the compensation details listed reflect the base salary only, and do not include bonus and benefits. </div><div>Pay Range</div><div>$173,040—$203,576 USD</div></div></div>

Sr. Manager, Cybersecurity

About the Job

About the Company

Avantus

Similar Jobs

Senior Manager - Cyber Security

Senior Manager - Cyber Security

Senior Director, Security Engineering

Senior Director, Security Engineering

Global IT Security Expert - OT

Global IT Security Expert - OT

Manager, Cybersecurity & Operations

Manager, Cybersecurity & Operations

Network & Security Engineer

Network & Security Engineer

Senior Security Engineer

Senior Security Engineer

Senior Manager of Information Security

Senior Manager of Information Security

Information System Security Officer

Information System Security Officer

Senior Manager, IT & Cybersecurity

Senior Manager, IT & Cybersecurity

Senior Manager, Information Technology and Cybersecurity

Senior Manager, Information Technology and Cybersecurity