Director, Global Cybersecurity

Fluence Energy•Arlington, VA

About The Position

The Director, Global Cybersecurity leads Fluence’s global cybersecurity operations and strengthens its ability to identify, investigate, contain, and recover from threats across corporate IT, cloud, customer-facing, and operational technology environments. Reporting to the Chief Information Security Officer, the role provides strategic and operational leadership for security monitoring, threat detection, incident response, security awareness, OT security operations, and the technology infrastructure supporting these capabilities. The Director is a senior incident leader and partner to cross-functional leaders, combining technical credibility, decisive incident leadership, business judgment, and the ability to drive outcomes across a complex global organization. The role leads global monitoring, threat detection, threat hunting, incident response, and OT security operations; oversees security platforms and operational readiness; and directs the response to significant cybersecurity events. It also leads the global security-awareness and human-risk program, develops the cybersecurity infrastructure roadmap, and drives automation and operational excellence. The Director advances cybersecurity governance, risk management, regulatory compliance, and remediation, while translating technical risks into business impacts for executives and governance forums. The position also leads and develops a globally distributed cybersecurity team and manages security service providers, technology vendors, and incident-response partners.

Requirements

Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or a related field, or equivalent practical experience.
At least 15 years of progressive experience in cybersecurity operations, incident response, security engineering, infrastructure security, or a related discipline.
Demonstrated experience leading significant cybersecurity incidents involving multiple technical and business stakeholders.
Strong experience with SIEM, endpoint detection and response, network security monitoring, identity protection, cloud security, threat intelligence, security automation, and incident-response technologies.
Experience operating security capabilities across Microsoft Azure, AWS, or GCP.
Mastery of cybersecurity governance, risk management, incident response, and control frameworks, including extensive experience applying and operationalizing NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443 across complex global environments.
Ability to communicate complex technical risks clearly to executives, customers, legal counsel, auditors, and nontechnical stakeholders.
Proven ability to influence teams and drive remediation without relying solely on formal authority.

Nice To Haves

Master’s degree in cybersecurity, information technology, engineering, business, or a related field.
Experience securing or monitoring industrial control systems, operational technology, energy infrastructure, manufacturing environments, or customer-owned critical systems.
Experience building or maturing a global security operations or incident-response function.
Experience with Microsoft Sentinel, Microsoft Defender, Tenable, Darktrace, Microsoft Purview, BeyondTrust, or comparable platforms.
Experience supporting cybersecurity certifications and audits, customer assurance, regulatory examinations, or critical-infrastructure requirements.
Relevant certifications such as CISSP, CISM, GIAC Certified Incident Handler, GIAC Certified Forensic Analyst, or equivalent.

Responsibilities

Lead global security monitoring, threat detection, threat hunting, and incident response across corporate IT, cloud, identity, endpoint, application, network, and relevant OT environments.
Direct incident triage, investigation, containment, eradication, recovery, evidence preservation, communications, and lessons-learned activities for significant cybersecurity events.
Oversee SIEM, endpoint detection and response, network detection, threat intelligence, and security automation, including detection engineering, alert tuning, escalation criteria, and response playbooks.
Serve as incident commander or senior cybersecurity responder, coordinating with Fluence cross-functional leaders, external counsel, insurers, and forensic partners.
Maintain and improve the global Incident Response Plan, operating procedures, exercises, and readiness metrics.
Lead cybersecurity operations supporting Battery Energy Storage System and other customer-facing OT environments managed by Fluence.
Define OT monitoring, logging, remote-access, detection, escalation, evidence-preservation, and incident-response requirements with relevant teams.
Coordinate intake, assessment, investigation, and resolution of customer-reported cybersecurity events.
Drive remediation of material OT vulnerabilities and operational risks, escalating unresolved issues, resource constraints, and customer-impacting trends to the CISO and appropriate governance bodies.
Support operational implementation of cybersecurity standards and frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443.
Lead the global security awareness and human-risk program, including phishing simulations, targeted learning, employee communications, newsletters, and role-based training.
Use threat intelligence, incident trends, and simulation results to prioritize awareness topics.
Partner with Human Resources, Privacy, Legal, Communications, and business leaders to ensure awareness activities are effective, appropriately governed, and aligned with employee and data-protection requirements.
Develop metrics for employee reporting behavior, training completion, repeat risk patterns, and organizational resilience improvement.
Define and execute the cybersecurity infrastructure roadmap for monitoring, detection, incident response, threat intelligence, endpoint and identity security, email security, data protection, vulnerability management, and automation.
Oversee architecture, implementation, integration, configuration, resilience, access control, change management, and lifecycle of critical security platforms.
Expand automation to improve investigation quality, accelerate containment, reduce repetitive analyst work, and strengthen response consistency.
Establish monitoring and security-control requirements for new technologies, cloud services, acquisitions, customer-supporting platforms, and OT assets before production deployment.
Drive remediation of significant vulnerabilities and exposures with accountable asset owners and administrators.
Continuously improve cybersecurity policies, standards, procedures, control requirements, and governance processes in response to changes in threats, business conditions, technology, and regulatory expectations.
Lead global cybersecurity regulatory-compliance initiatives, assessments, readiness activities, gap remediation, and executive reporting with cross-functional teams.
Partner with business leaders and control owners to identify, assess, prioritize, and monitor cybersecurity risks.
Challenge material cybersecurity risks, control gaps, remediation plans, risk acceptances, and exceptions, and escalate unresolved or overdue risks through governance forums.
Maintain linkage among cybersecurity risks, incidents, vulnerabilities, audit findings, compliance obligations, and strategic improvement initiatives to support executive decisions.
Prepare risk reporting, dashboards, and decision materials for the Cybersecurity Steering Committee and other leadership forums, translating technical exposure into business, operational, customer, regulatory, and resilience impacts.
Coordinate Cybersecurity Steering Committee agendas, pre-read materials, dashboards, incident updates, risk summaries, decisions, and action-item tracking.
Present cybersecurity risks, operational trends, incidents, compliance status, investments, and remediation progress to executives and governance forums in clear business terms.
Define and maintain cybersecurity operations metrics covering monitoring coverage, detection quality, response time, containment, remediation, security-tool health, awareness outcomes, and OT security operations.
Lead, develop, and mentor a globally distributed cybersecurity team; establish roles, on-call expectations, succession coverage, cross-training, and documented operating procedures.
Manage security service providers, technology vendors, and external incident-response partners while maintaining accountability for service quality and outcomes.