Director, Global Cybersecurity

Fluence•Arlington, VA

About The Position

The Director, Global Cybersecurity leads Fluence’s global cybersecurity operations and strengthens the organization’s ability to identify, investigate, contain, and recover from cybersecurity threats across corporate IT, cloud, customer-facing, and operational technology environments. Reporting to the Chief Information Security Officer, this role provides strategic and operational leadership for security monitoring, threat detection, incident response, security awareness, OT security operations, and the cybersecurity technology infrastructure supporting these capabilities. The Director serves as a senior incident leader and trusted partner to cross-functional leaders. The ideal candidate combines deep technical credibility, decisive incident leadership, strong business judgment, and the ability to drive outcomes across a complex global organization. The role leads security monitoring, threat detection, threat hunting, incident response, OT security operations, customer-event coordination, and Fluence’s global security awareness program. It also sets the roadmap and oversees the lifecycle of security platforms, drives cybersecurity governance and regulatory compliance, and provides executive reporting on risks, incidents, operations, and remediation. The Director leads and develops a globally distributed cybersecurity team and manages service providers, technology vendors, and external incident-response partners. Fluence is a global market leader in energy storage and optimization software for renewables and storage. Its solutions and operational services support a more resilient grid and renewable energy portfolios, with implementations across nearly 50 markets.

Requirements

Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or a related field, or equivalent practical experience.
Minimum 15 years of progressive experience in cybersecurity operations, incident response, security engineering, infrastructure security, or a related discipline.
Demonstrated experience leading significant cybersecurity incidents involving multiple technical and business stakeholders.
Strong experience with SIEM, endpoint detection and response, network security monitoring, identity protection, cloud security, threat intelligence, security automation, and incident-response technologies.
Experience operating security capabilities across Microsoft Azure, AWS, or GCP.
Demonstrated mastery of cybersecurity governance, risk management, incident response, and control frameworks, with extensive experience applying and operationalizing the NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443 to establish enterprise and OT security requirements, assess control effectiveness, guide risk-based decisions, and drive sustainable remediation across complex global environments.
Ability to communicate complex technical risks clearly to executives, customers, legal counsel, auditors, and nontechnical stakeholders.
Proven ability to influence and drive remediation across teams without relying solely on formal authority.
Legally authorized to work in the United States at the time of application and throughout employment, without employer sponsorship.

Nice To Haves

Master’s degree in cybersecurity, information technology, engineering, business, or a related field.
Experience securing or monitoring industrial control systems, operational technology, energy infrastructure, manufacturing environments, or customer-owned critical systems.
Experience building or maturing a global security operations or incident-response function.
Experience with Microsoft Sentinel, Microsoft Defender, Tenable, Darktrace, Microsoft Purview, BeyondTrust, or comparable platforms.
Experience supporting cybersecurity certifications and audits, customer assurance, regulatory examinations, or critical-infrastructure requirements.
Relevant certifications such as CISSP, CISM, GIAC Certified Incident Handler, GIAC Certified Forensic Analyst, or equivalent.

Responsibilities

Lead global security monitoring, threat detection, threat hunting, and incident response across corporate IT, cloud, identity, endpoint, application, network, and relevant OT environments.
Direct incident triage, investigation, containment, eradication, recovery, evidence preservation, communications, and lessons-learned activities for significant cybersecurity events.
Oversee SIEM, endpoint detection and response, network detection, threat intelligence, and security automation, including detection engineering, alert tuning, escalation criteria, and response playbooks.
Serve as incident commander or senior cybersecurity responder and coordinate response activities with Fluence cross-functional leaders, external counsel, insurers, and forensic partners.
Maintain and continuously improve the global Incident Response Plan, operating procedures, exercises, and readiness metrics.
Lead cybersecurity operations supporting Battery Energy Storage System and other customer-facing operational technology environments managed by Fluence.
Define OT monitoring, logging, remote-access, detection, escalation, evidence-preservation, and incident-response requirements with relevant teams.
Coordinate intake, assessment, investigation, and resolution of customer-reported cybersecurity events.
Drive remediation of material OT cybersecurity vulnerabilities and operational risks, escalating unresolved issues, resource constraints, and customer-impacting trends.
Support operational implementation of cybersecurity standards and frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443.
Lead Fluence’s global security awareness and human-risk management program, including phishing simulations, targeted learning, employee communications, newsletters, and role-based training.
Prioritize awareness topics using threat intelligence, incident trends, and simulation results; partner with HR, Privacy, Legal, Communications, and business leaders to govern and align activities.
Develop metrics for employee reporting behavior, training completion, repeat risk patterns, and improvements in organizational resilience.
Define and execute the roadmap for cybersecurity infrastructure supporting monitoring, detection, incident response, threat intelligence, endpoint security, identity security, email security, data protection, vulnerability management, and automation.
Oversee the architecture, implementation, integration, configuration, resilience, access control, change management, and lifecycle of critical security platforms.
Expand automation to improve investigations, accelerate containment, reduce repetitive analyst work, and strengthen response consistency.
Establish monitoring and security-control requirements for new technologies, cloud services, acquisitions, customer-supporting platforms, and OT assets before production deployment.
Drive remediation of significant vulnerabilities and exposures with accountable asset owners and administrators.
Improve cybersecurity policies, standards, procedures, control requirements, and governance processes in response to changes in threats, business conditions, technology, and regulatory expectations.
Drive global cybersecurity regulatory compliance initiatives, assessments, readiness activities, remediation of gaps, and executive reporting in partnership with cross-functional teams.
Partner with business leaders and control owners to identify, assess, prioritize, and monitor cybersecurity risks.
Challenge material cybersecurity risks, control gaps, remediation plans, risk acceptances, and exceptions, and escalate unresolved or overdue risks through appropriate governance forums.
Maintain linkage among cybersecurity risks, incidents, vulnerabilities, audit findings, compliance obligations, and strategic improvement initiatives to support executive decisions.
Prepare risk reporting, dashboards, and decision materials for the Cybersecurity Steering Committee and other leadership forums, translating technical exposure into business, operational, customer, regulatory, and resilience impacts.
Coordinate Cybersecurity Steering Committee agendas, pre-read materials, dashboards, incident updates, risk summaries, decisions, and action-item tracking.
Present cybersecurity risks, operational trends, incidents, compliance status, investments, and remediation progress to executives and governance forums in clear business terms.
Define and maintain cybersecurity operations metrics covering monitoring coverage, detection quality, response time, containment, remediation, security-tool health, awareness outcomes, and OT security operations.
Lead, develop, and mentor a globally distributed cybersecurity team; establish roles, on-call expectations, succession coverage, cross-training, and documented operating procedures.
Manage security service providers, technology vendors, and external incident-response partners, maintaining accountability for service quality and outcomes.