Position Information:Job Title: Sr. Manager - IT SecurityLocation: Orange, CTSalary Range: $155,600 - $194,500Schedule: On Site - OfficeJob SummaryThe Sr. Manager, Network &amp; Infrastructure Security is accountable for the security-by-design, operational resiliency, and lifecycle governance of Avangrid’s network security and enterprise infrastructure security platforms. This role leads two teams responsible for protecting connectivity and critical IT services across the enterprise: (1) Network Security (firewalls, IPS/IDS, network segmentation, perimeter security, and cloud network security) and (2) Infrastructure Security / IT Security (enterprise security platforms, identity &amp; access management, privileged access, endpoint security, vulnerability management, and compliance support).Key ResponsibilitiesStrategy, Roadmap and Operating Model<ul><li>Leads and integrates Network Security and Infrastructure Security capabilities, establishing a cohesive operating model, clear ownership, and measurable outcomes for protection of enterprise connectivity and IT platforms.</li><li>Defines the technology strategy, target-state architecture, and multi-year roadmaps for network security and enterprise infrastructure security services, aligned to Avangrid standards, business priorities, and the enterprise risk posture.</li><li>Establishes lifecycle management programs to ensure security technologies are correctly deployed, maintained, patched, and modernized; manages roadmaps aligned to enterprise strategy, technology evolution, and continuous transformation.</li></ul>Network Security and Infrastructure Security Platforms<ul><li>Provides leadership over current and future enterprise security technologies and services, including platforms such as Fortinet, Palo Alto, Check Point, Cisco, WAF and edge security platforms such as Akamai WAF, secure web gateway/proxy platforms such as Zscaler, privileged access platforms such as CyberArk, network detection and response platforms such as ExtraHop, or equivalent enterprise technologies.</li><li>Defines and governs engineering standards, reference architectures, and technology guardrails for network security controls (e.g., perimeter, segmentation, IDS/IPS, and cloud network security) and infrastructure security platforms (e.g., identity and access management, privileged access, endpoint security, vulnerability management, and security tooling operations).</li><li>Champions security-by-design by embedding security requirements into architecture, engineering standards, configuration baselines, and operational processes.</li><li>Provides security leadership and architectural governance for cloud network and infrastructure security capabilities, in partnership with Cloud and Platform teams.</li><li>Leads hardening management by selecting applicable standards and reference guides, defining configuration baselines, prioritizing controls, and establishing maturity levels for secure infrastructure and network security profiles.</li></ul>Firewall, SD-WAN, Segmentation and Secure Connectivity<ul><li>Drives modernization and standardization of enterprise firewall and SD-WAN services, including policy governance, rule base optimization, segmentation alignment, VPN/NAT standards, high availability, logging, monitoring, change validation, and operational readiness.</li><li>Defines segmentation and secure connectivity patterns (e.g., site-to-site connectivity, remote access, cloud connectivity, and third-party connectivity) that reduce exposure, support resiliency, and enable business outcomes.</li><li>Partners with architecture and engineering stakeholders to ensure consistent implementation of perimeter, internal segmentation, and edge security controls across enterprise and cloud environments.</li></ul>Operations, Resiliency and Compliance<ul><li>Delivers high levels of operational security, resiliency, and reliability for network and infrastructure security services; defines operational programs and identifies opportunities for improving operational efficiency and reliability as demanded by Avangrid corporate applications.</li><li>Manages operational security performance, including service reliability, incident response partnership, threat containment support, vulnerability remediation execution, and continuous improvement of controls and monitoring.</li><li>Ensures resiliency and availability of security services through capacity planning, high-availability design principles, disciplined change management, and operational readiness practices.</li><li>Leads regulated-utility security alignment activities, including audit support, risk assessments, policy adherence, evidence collection, and remediation planning in partnership with compliance and control owners.</li><li>Reduces operational bottlenecks by improving intake, design review, implementation standards, escalation models, documentation, and automation opportunities to strengthen L3 engineering support.</li></ul>Stakeholder, Vendor and Financial Management<ul><li>Partners with Cybersecurity, Corporate Security, Risk, Infrastructure, Cloud, and Network Engineering teams to align priorities, manage shared dependencies, and drive enterprise security outcomes.</li><li>Manages vendor relationships and service delivery expectations, including operational KPIs/SLAs, contract performance, service reviews, and financial stewardship for assigned programs and platforms.</li></ul>People Leadership and Workforce Development<ul><li>Provides leadership for managers, technical leads, and individual contributors: sets objectives, manages performance, develops skills and career paths, executes workforce planning, and builds an inclusive, high-performing culture.</li><li>Builds team capability through mentoring, coaching, hiring, and succession planning to support an evolving security and network technology landscape.</li></ul>Required Qualifications<ul><li>Bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related field and a minimum of ten (10) years of relevant experience. An equivalent combination of education and experience may be considered.</li><li>Relevant experience to include a minimum of five (5) years as a Technology Manager, including direct people leadership and accountability for service delivery, operating model maturity, and multi-team execution.</li><li>Demonstrated leadership across enterprise network security and infrastructure security capabilities in a large-scale, complex environment, including enterprise firewall, SD-WAN, WAF, IDS/IPS, segmentation, secure connectivity (VPN/NAT), cloud network security, identity and access management (IAM), privileged access management (PAM), endpoint security, vulnerability management, network detection and response (NDR), and security tooling operations.</li><li>Strong understanding of firewall policy lifecycle management, rule review and optimization, segmentation strategy, VPN/NAT governance, high availability, logging, monitoring, change validation, and audit evidence requirements.</li><li>Experience leading enterprise security platforms and vendors such as Fortinet, Palo Alto, Check Point, Cisco, Akamai WAF, Zscaler, CyberArk, ExtraHop, or equivalent enterprise technologies.</li><li>Ability to establish governance, engineering standards, and operating rhythms that improve security outcomes, service reliability, and delivery predictability.</li><li>Experience defining and managing operational metrics, including KPIs and SLAs; leading service reviews; maintaining operational dashboards; and producing executive reporting, risk summaries, roadmap updates, and decision materials.</li><li>Ability to organize, prioritize, and coordinate multiple work activities and meet target deadlines.</li><li>Ability to communicate with and influence technical and non-technical customers, colleagues, and vendors.</li><li>Ability to share knowledge and mentor and manage less experienced team members.</li><li>Strong commitment to personnel safety and IT security.</li><li>Travel within the US and to Europe may be required, as needed.</li></ul>Preferred Qualifications<ul><li>Master’s degree in IT, Cybersecurity, Engineering, Business Administration, or related field.</li><li>Experience with Fortinet technologies such as FortiGate, FortiManager, FortiAnalyzer, and Secure SD-WAN, or equivalent firewall and SD-WAN platforms.</li><li>Experience with enterprise firewall platforms such as Fortinet, Palo Alto, Check Point, Cisco, or equivalent enterprise technologies.</li><li>Experience with WAF and edge security platforms such as Akamai WAF, or equivalent enterprise technologies.</li><li>Experience with proxy or secure web gateway platforms such as Zscaler, or equivalent enterprise technologies.</li><li>Experience with privileged access management or identity security platforms such as CyberArk, or equivalent enterprise technologies.</li><li>Experience with network detection and response platforms such as ExtraHop, or equivalent enterprise technologies.</li><li>Relevant certifications in network security, firewall, SD-WAN, cybersecurity, infrastructure security, identity security, or IT service management.</li></ul>Competencies: <ul><li>Growth &amp; Continuous Improvement</li></ul><ul><li>Initiative &amp; Change</li><li>Focused on Results</li><li>Customer Centric (internal and/or External)</li><li>Communication</li><li>Collaboration</li><li>Leadership (people managers/leaders)</li></ul>What We Offer:<ul><li>Competitive benefits and growth opportunities</li><li>Generous performance‑based bonuses</li><li>12% 401(k) match</li><li>Comprehensive health, dental, and vision insurance</li><li>Tuition reimbursement</li><li>Professional development and clear career‑advancement pathways</li></ul>For more information, please visit: <a href="https://www.avangrid.com/peopleandtalent/careercenter/health-and-wellbeing">Benefits - Avangrid</a> #LI-Onsite; #LI-CH1Company:AVANGRID MANAGEMENT COMPANY, LLC.Mobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at <a href="mailto:careers@avangrid.com">careers@avangrid.com</a>.Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.  This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&amp;P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.Job Posting End Date:September-17-2026

Avangrid is a leading sustainable energy company transitioning America toward a clean and connected future headquartered in Orange, CT, and has a footprint in 24 states with $40 billion in assets. Our primary businesses are Networks, which serves 3.3 million electric and natural gas customers in the Northeast, and Renewables, the third-largest renewable energy company in the U.S. with a diverse onshore and offshore renewable energy portfolio. With more than 7,000 employees, Avangrid has built a culture that blends diversity, equity and inclusion guided by the company&rsquo;s ESG+F framework and the UN Sustainable Development Goals. This has led to recognition by JUST Capital in 2021 and 2022 as one of America&rsquo;s best corporate citizens and second in utilities for our commitment to the environment and the communities we serve. Avangrid has been named one of the World&rsquo;s Most Ethical Companies for four consecutive years by the Ethisphere Institute.

Sr. Manager - IT Security

Position Information:Job Title: Sr. Manager - IT SecurityLocation: Orange, CTSalary Range: $155,600 - $194,500Schedule: On Site - OfficeJob SummaryThe Sr. Manager, Network &amp; Infrastructure Security is accountable for the security-by-design, operational resiliency, and lifecycle governance of Avangrid’s network security and enterprise infrastructure security platforms. This role leads two teams responsible for protecting connectivity and critical IT services across the enterprise: (1) Network Security (firewalls, IPS/IDS, network segmentation, perimeter security, and cloud network security) and (2) Infrastructure Security / IT Security (enterprise security platforms, identity &amp; access management, privileged access, endpoint security, vulnerability management, and compliance support).Key ResponsibilitiesStrategy, Roadmap and Operating Model<ul><li>Leads and integrates Network Security and Infrastructure Security capabilities, establishing a cohesive operating model, clear ownership, and measurable outcomes for protection of enterprise connectivity and IT platforms.</li><li>Defines the technology strategy, target-state architecture, and multi-year roadmaps for network security and enterprise infrastructure security services, aligned to Avangrid standards, business priorities, and the enterprise risk posture.</li><li>Establishes lifecycle management programs to ensure security technologies are correctly deployed, maintained, patched, and modernized; manages roadmaps aligned to enterprise strategy, technology evolution, and continuous transformation.</li></ul>Network Security and Infrastructure Security Platforms<ul><li>Provides leadership over current and future enterprise security technologies and services, including platforms such as Fortinet, Palo Alto, Check Point, Cisco, WAF and edge security platforms such as Akamai WAF, secure web gateway/proxy platforms such as Zscaler, privileged access platforms such as CyberArk, network detection and response platforms such as ExtraHop, or equivalent enterprise technologies.</li><li>Defines and governs engineering standards, reference architectures, and technology guardrails for network security controls (e.g., perimeter, segmentation, IDS/IPS, and cloud network security) and infrastructure security platforms (e.g., identity and access management, privileged access, endpoint security, vulnerability management, and security tooling operations).</li><li>Champions security-by-design by embedding security requirements into architecture, engineering standards, configuration baselines, and operational processes.</li><li>Provides security leadership and architectural governance for cloud network and infrastructure security capabilities, in partnership with Cloud and Platform teams.</li><li>Leads hardening management by selecting applicable standards and reference guides, defining configuration baselines, prioritizing controls, and establishing maturity levels for secure infrastructure and network security profiles.</li></ul>Firewall, SD-WAN, Segmentation and Secure Connectivity<ul><li>Drives modernization and standardization of enterprise firewall and SD-WAN services, including policy governance, rule base optimization, segmentation alignment, VPN/NAT standards, high availability, logging, monitoring, change validation, and operational readiness.</li><li>Defines segmentation and secure connectivity patterns (e.g., site-to-site connectivity, remote access, cloud connectivity, and third-party connectivity) that reduce exposure, support resiliency, and enable business outcomes.</li><li>Partners with architecture and engineering stakeholders to ensure consistent implementation of perimeter, internal segmentation, and edge security controls across enterprise and cloud environments.</li></ul>Operations, Resiliency and Compliance<ul><li>Delivers high levels of operational security, resiliency, and reliability for network and infrastructure security services; defines operational programs and identifies opportunities for improving operational efficiency and reliability as demanded by Avangrid corporate applications.</li><li>Manages operational security performance, including service reliability, incident response partnership, threat containment support, vulnerability remediation execution, and continuous improvement of controls and monitoring.</li><li>Ensures resiliency and availability of security services through capacity planning, high-availability design principles, disciplined change management, and operational readiness practices.</li><li>Leads regulated-utility security alignment activities, including audit support, risk assessments, policy adherence, evidence collection, and remediation planning in partnership with compliance and control owners.</li><li>Reduces operational bottlenecks by improving intake, design review, implementation standards, escalation models, documentation, and automation opportunities to strengthen L3 engineering support.</li></ul>Stakeholder, Vendor and Financial Management<ul><li>Partners with Cybersecurity, Corporate Security, Risk, Infrastructure, Cloud, and Network Engineering teams to align priorities, manage shared dependencies, and drive enterprise security outcomes.</li><li>Manages vendor relationships and service delivery expectations, including operational KPIs/SLAs, contract performance, service reviews, and financial stewardship for assigned programs and platforms.</li></ul>People Leadership and Workforce Development<ul><li>Provides leadership for managers, technical leads, and individual contributors: sets objectives, manages performance, develops skills and career paths, executes workforce planning, and builds an inclusive, high-performing culture.</li><li>Builds team capability through mentoring, coaching, hiring, and succession planning to support an evolving security and network technology landscape.</li></ul>Required Qualifications<ul><li>Bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related field and a minimum of ten (10) years of relevant experience. An equivalent combination of education and experience may be considered.</li><li>Relevant experience to include a minimum of five (5) years as a Technology Manager, including direct people leadership and accountability for service delivery, operating model maturity, and multi-team execution.</li><li>Demonstrated leadership across enterprise network security and infrastructure security capabilities in a large-scale, complex environment, including enterprise firewall, SD-WAN, WAF, IDS/IPS, segmentation, secure connectivity (VPN/NAT), cloud network security, identity and access management (IAM), privileged access management (PAM), endpoint security, vulnerability management, network detection and response (NDR), and security tooling operations.</li><li>Strong understanding of firewall policy lifecycle management, rule review and optimization, segmentation strategy, VPN/NAT governance, high availability, logging, monitoring, change validation, and audit evidence requirements.</li><li>Experience leading enterprise security platforms and vendors such as Fortinet, Palo Alto, Check Point, Cisco, Akamai WAF, Zscaler, CyberArk, ExtraHop, or equivalent enterprise technologies.</li><li>Ability to establish governance, engineering standards, and operating rhythms that improve security outcomes, service reliability, and delivery predictability.</li><li>Experience defining and managing operational metrics, including KPIs and SLAs; leading service reviews; maintaining operational dashboards; and producing executive reporting, risk summaries, roadmap updates, and decision materials.</li><li>Ability to organize, prioritize, and coordinate multiple work activities and meet target deadlines.</li><li>Ability to communicate with and influence technical and non-technical customers, colleagues, and vendors.</li><li>Ability to share knowledge and mentor and manage less experienced team members.</li><li>Strong commitment to personnel safety and IT security.</li><li>Travel within the US and to Europe may be required, as needed.</li></ul>Preferred Qualifications<ul><li>Master’s degree in IT, Cybersecurity, Engineering, Business Administration, or related field.</li><li>Experience with Fortinet technologies such as FortiGate, FortiManager, FortiAnalyzer, and Secure SD-WAN, or equivalent firewall and SD-WAN platforms.</li><li>Experience with enterprise firewall platforms such as Fortinet, Palo Alto, Check Point, Cisco, or equivalent enterprise technologies.</li><li>Experience with WAF and edge security platforms such as Akamai WAF, or equivalent enterprise technologies.</li><li>Experience with proxy or secure web gateway platforms such as Zscaler, or equivalent enterprise technologies.</li><li>Experience with privileged access management or identity security platforms such as CyberArk, or equivalent enterprise technologies.</li><li>Experience with network detection and response platforms such as ExtraHop, or equivalent enterprise technologies.</li><li>Relevant certifications in network security, firewall, SD-WAN, cybersecurity, infrastructure security, identity security, or IT service management.</li></ul>Competencies: <ul><li>Growth &amp; Continuous Improvement</li></ul><ul><li>Initiative &amp; Change</li><li>Focused on Results</li><li>Customer Centric (internal and/or External)</li><li>Communication</li><li>Collaboration</li><li>Leadership (people managers/leaders)</li></ul>What We Offer:<ul><li>Competitive benefits and growth opportunities</li><li>Generous performance‑based bonuses</li><li>12% 401(k) match</li><li>Comprehensive health, dental, and vision insurance</li><li>Tuition reimbursement</li><li>Professional development and clear career‑advancement pathways</li></ul>For more information, please visit: <a href="https://www.avangrid.com/peopleandtalent/careercenter/health-and-wellbeing">Benefits - Avangrid</a> #LI-Onsite; #LI-CH1Company:AVANGRID MANAGEMENT COMPANY, LLC.Mobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at <a href="mailto:careers@avangrid.com">careers@avangrid.com</a>.Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.  This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&amp;P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.Job Posting End Date:September-17-2026

Sr. Manager - IT Security

About the Job

About the Company

Iberdrola

Similar Jobs

IT/OT Security Engineer

IT/OT Security Engineer

Director of Information Security

Director of Information Security

Manager - Cyber Operations

Manager - Cyber Operations

Senior/Staff Network Security Engineer

Senior/Staff Network Security Engineer

IT Security Engineer

IT Security Engineer

Manager, Information Security Operations

Manager, Information Security Operations

Senior Director, Information Security

Senior Director, Information Security

Staff IT, Cybersecurity & OT Security Engineer

Staff IT, Cybersecurity & OT Security Engineer

Sr Manager - Cyber Defense

Sr Manager - Cyber Defense

Lead Architect - Network Security

Lead Architect - Network Security