Cybersecurity Technology Architect

Pivot Point Solutions•Oakland, CA

1d•$121,181 - $178,422•Onsite

About The Position

Pivot Point Solutions is a California-based technology consulting firm that specializes in delivering IT solutions and support for the construction and utility industries. We partner with organizations across the state to provide reliable technology services that improve operational efficiency, enhance project delivery, and support critical business systems. Our team understands the unique technology challenges facing construction and utility organizations, from field operations and infrastructure projects to enterprise applications and cybersecurity. By combining industry expertise with responsive service, we help clients modernize their technology environments, streamline workflows, and maintain secure, reliable IT systems that support long-term growth.

Requirements

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline, or equivalent professional experience
8+ years of combined cybersecurity, information security, IT, critical infrastructure, intelligence, or related experience
Advanced experience with cybersecurity risk management, governance, and compliance
Experience conducting cybersecurity risk assessments and evaluating security controls
Knowledge of enterprise IT security across applications, systems, networks, and infrastructure
Experience working with cybersecurity standards and frameworks such as NIST and ISO
Understanding of regulatory and compliance requirements within complex or highly regulated organizations
Current cybersecurity certification such as Security+, GIAC, SANS, Cisco Security, Microsoft Security, or equivalent
Strong executive communication, analytical, and decision-making capabilities
Ability to influence stakeholders and lead cybersecurity initiatives across multiple teams

Nice To Haves

CISSP, CISM, CRISC, CISA, or comparable advanced cybersecurity certification
Master's degree in Cybersecurity, Computer Science, Information Systems, or a related discipline
Cybersecurity experience within utilities, energy, critical infrastructure, or another regulated industry
Experience securing Operational Technology (OT), Industrial Control Systems (ICS), SCADA, or PLC environments
Knowledge of NIST 800-82 and industrial control system security practices
Experience with NERC CIP or other critical infrastructure regulatory requirements
Experience with AI/ML security, AI governance, model risk, or the NIST AI Risk Management Framework
Knowledge of SOX, CCPA/CPRA, HIPAA, or other security and privacy regulations
Experience presenting cybersecurity risk and strategy recommendations to senior or executive leadership

Responsibilities

Lead and support enterprise cybersecurity governance, risk management, and compliance initiatives
Develop cybersecurity strategies, roadmaps, operating plans, and risk reduction priorities
Maintain and evaluate cybersecurity risk portfolios across multiple business and technology environments
Serve as a cybersecurity liaison with regulatory organizations and key internal stakeholders
Lead or participate in security governance committees, steering groups, and executive discussions
Perform cybersecurity and compliance assessments using established industry frameworks
Evaluate cybersecurity risks associated with AI and machine learning technologies, including data exposure, model misuse, adversarial attacks, and emerging threats
Support development of AI security policies, governance practices, and responsible-use standards
Assess Industrial Control Systems (ICS), SCADA environments, PLCs, and other operational technology for cybersecurity risk
Develop and recommend OT security controls aligned with critical infrastructure security practices
Evaluate security architecture, applications, systems, networks, and business processes to identify vulnerabilities and control gaps
Partner with legal, compliance, technology, and business teams to address regulatory and cybersecurity requirements
Translate complex cybersecurity findings into clear risk recommendations for technical and executive stakeholders
Monitor evolving cybersecurity regulations, frameworks, threats, and technology trends