Director Security and Response

ATC • Cottage Grove, WI

2d

About The Position

American Transmission Company (ATC) is seeking a Director, Security & Response to lead an integrated enterprise security function spanning cybersecurity, physical security, threat intelligence, incident response and organizational resilience. Reporting to the EVP, Chief Systems Officer, this leader will protect ATC’s people, facilities, critical assets, digital infrastructure and intellectual property while strengthening regulatory compliance, business continuity and organizational confidence. The role partners with business leaders to explain complex risks and support informed decisions that balance security with reliability, regulatory requirements, operational priorities and user experience.

The Director will sustain disciplined cybersecurity and physical security operations, develop measurable security and resilience priorities, and improve visibility into strategy, investments, priorities and performance for senior leadership and the board. The role also clarifies responsibilities and decision rights with partner functions, sets direction for identity and access capabilities and AI-related security considerations, and develops leadership capability, accountability and succession strength across the organization.

ATC describes its work as purpose-driven, focused on powering everyday life and grid modernization. Its culture emphasizes trust, collaboration, flexibility with accountability, employee growth and development, comprehensive rewards, reliable innovation and meaningful impact for customers and stakeholders.

Requirements

• Progressive leadership experience in enterprise security, cybersecurity, resilience, incident response or a closely related discipline.
• Experience leading multidisciplinary teams and managers in a complex, highly regulated or operationally critical organization.
• Broad knowledge of cybersecurity operations, threat detection, vulnerability management, data protection and incident response.
• Experience with physical security, access control, surveillance, personnel safety and critical-asset protection.
• Understanding of operational technology and industrial control system risk; NERC CIP knowledge is highly relevant.
• Experience translating enterprise risk into strategic roadmaps, investment priorities, governance decisions and executive communication.
• Strong partnership experience with Technology, Operations, Legal, Human Resources, Compliance, Audit, Risk and executive leadership.
• Experience managing third-party security providers, vendors, contracts and performance expectations.
• Listening-first leadership style with the courage and decisiveness to act when risk is elevated.
• Learning agility around emerging capabilities, including artificial intelligence and identity and access management.
• Bachelor’s degree in cybersecurity, information technology, engineering, risk management, business or a related discipline is expected; comparable combinations of education and directly relevant leadership experience will be considered.

Nice To Haves

• An advanced degree may be beneficial.
• CISSP certification is a plus.
• NERC CIP knowledge is highly relevant.

Responsibilities

• Develop and execute an integrated enterprise security strategy spanning cybersecurity, physical security, threat intelligence and incident response.
• Lead threat detection, vulnerability management, data protection and response to security events.
• Oversee access control, surveillance, personnel safety, and protection of critical facilities and assets.
• Establish cyber and physical incident protocols, escalation paths, notification requirements and recovery practices.
• Partner with Technology, Operations, Legal, Human Resources, Compliance, Audit and Risk to strengthen enterprise resilience.
• Lead security vendors and third-party providers, setting expectations for contracts, service delivery and performance.
• Develop leaders and build a high-performing organization with clear accountability and strong succession capabilities.
• Translate complex security risks into priorities, investment decisions and recommendations for executive and board audiences.
• Sustain cybersecurity and physical security operations while maintaining incident response and threat awareness.
• Turn ATC strategies, risks and opportunities into measurable security and resilience priorities.
• Increase senior leadership and board visibility into security strategy, investments, priorities and performance.
• Clarify responsibilities and decision rights across Security & Response and partner functions, including Risk and Audit.
• Establish direction for identity and access capabilities, AI-related security considerations and emerging risks while balancing business needs and user experience.
• Build leadership capability, accountability, talent development and succession capacity.

Benefits

• Comprehensive compensation, benefits and well-being offerings designed to support employees’ needs.
• Cross-functional opportunities, skill-building and assignments that stretch potential and build careers.
• Flexible work environment that encourages autonomy, connection and choice with accountability.

What This Job Offers

• Job Type: Full-time
• Career Level: Director