The Senior Manager, Cybersecurity owns Apex's cybersecurity program across corporate IT, cloud, and operational technology environments, reporting to the Director of Integrated Technology Solutions (ITS).This is a senior individual-contributor role with no direct reports and real authority. You'll set security standards, review significant technology changes, direct security work carried out by ITS engineers and operations staff, and lead the response when incidents occur. You can enforce security standards and take immediate protective action against an active threat, while business leaders own decisions to accept material residual risk.This role leads Apex's cybersecurity program at a point where the direction is set, and the foundations are in place. The work now is to mature it: turning strategy into durable standards, sharper risk decisions, and a program that keeps pace as the business and the threat landscape change. You'll have broad scope, direct access to leadership, and a real hand in protecting infrastructure that supports the energy transition.The role is supported by ITS infrastructure, systems engineering, and operations teams, and by a 24/7 managed security partner that provides monitoring and initial response. You'll be the senior escalation point when incidents occur, including after hours.<ul><li>Hours: Full-time</li><li>Type: Exempt</li><li>Department: Integrated Technology Solutions</li><li>Travel: 10% </li><li>Office Location: Charlottesville, VA</li></ul>Primary Responsibilities: Strategy &amp; Risk<ul><li>Lead and evolve Apex's cybersecurity strategy, roadmap, policies, and standards in partnership with the Director of ITS</li><li>Run the cybersecurity risk program, including the risk register, assessments of systems, vendors, and integrations, and security review of significant technology initiatives before implementation</li><li>Report security posture, material risk, and program performance to leadership</li></ul>Security Operations<ul><li>Oversee vulnerability management, endpoint protection, SIEM/SOC monitoring, network and firewall governance, and cloud security posture</li><li>Own identity and access standards, including IAM, PAM, and account lifecycle</li><li>Manage relationships with managed security, SOC, and incident response partners, including performance and escalation</li><li>Direct ITS technical staff on security work, while staying hands-on enough to investigate threats and validate controls yourself</li></ul>OT &amp; NERC CIP<ul><li>Define cybersecurity requirements for the IT/OT boundary, including remote and vendor access, in partnership with SCADA/OT leadership</li><li>Integrate NERC CIP cybersecurity requirements into Apex's overall security framework</li><li>Work with SCADA/OT leadership to extend incident response, monitoring, vulnerability management, and vendor risk programs to OT, including protection of critical backups</li></ul>Incident Response &amp; Resilience<ul><li>Serve as incident commander for cybersecurity events, coordinating with Legal, Communications, leadership, insurers, forensics partners, regulators, and law enforcement</li><li>Maintain incident response plans and playbooks, and run regular tabletop exercises, including joint exercises with SCADA/OT</li><li>Own IT disaster recovery and cyber recovery planning and testing, and coordinate enterprise business continuity</li></ul>Enabling the Business<ul><li>Set security requirements for AI, SaaS, APIs, automation, data handling, and secrets management so teams can adopt new technology responsibly</li><li>Lead security awareness, phishing simulation, and privileged-user training, and build security capability across ITS</li></ul>

For every companyno matter its sizeenergy makes growth possible. More and more, companies are looking to clean energy procurement as a strategic business decision to support their growth and business bottom line.
To reach this fast-evolving market's full potential, Apex is creating a path for renewable energy purchasers of all sizes. Even those investing in the projects themselves.
The Apex Approach to Solar
Apex's solar strategy builds on the expertise and data-driven philosophy that has led to the largest wind energy portfolio in the country.
Our experienced team leverages its existing development, transmission, construction, and asset management capabilities to tailor solar solutions to our customers' needs. Solar is a perfect complement to our core wind business and the emerging storage sector.
The value of energy storage is rising, and costs are falling.
Apex offers energy storage solutions, either as a standalone product or as part of a renewable energy system. As the cost of battery storage has declined, new opportunities for managing energy supplies have emerged. Apex has extensive experience in developing renewable energy projects and can help customers achieve their energy goals through a variety of products.

Senior Manager, Cybersecurity

About the Job

About the Company

Apex Clean Energy

Similar Jobs

Senior Cyber Systems Administrator

Senior Cyber Systems Administrator

Staff Network Security Architect

Staff Network Security Architect

Senior Software Systems Engineer - Security

Senior Software Systems Engineer - Security

Senior Network Security Engineer

Senior Network Security Engineer

Senior Incident Response Engineer

Senior Incident Response Engineer

Information Security Director

Information Security Director

Senior Security Consultant

Senior Security Consultant

Vulnerability Manager

Vulnerability Manager

Senior Security Engineer

Senior Security Engineer

Manager of Information Technology

Manager of Information Technology