Manager, IT Security

Fervo Energy • Houston, TX

3d • Hybrid

About The Position

The IT Security Manager will lead efforts to protect Fervo Energy’s corporate information assets, cloud environment, and data. The role owns the development and execution of cybersecurity strategy, threat detection and response, and compliance with applicable regulatory requirements. It serves as the subject matter expert for IT security posture, selecting, implementing, and evaluating security solutions for infrastructure, systems, and data. The position works closely with the OT cybersecurity function at the points where corporate IT and plant systems meet, and helps build organization-wide security awareness and compliance. The role reports to the Senior Director of Information Technology & Cybersecurity.

This is a hybrid position based in Fervo’s Houston office, with at least three days per week in the office. Approximately 20% travel is required.

Requirements

• 10+ years of relevant cybersecurity experience, including 3+ years in a leadership capacity.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience.
• Deep understanding of security frameworks such as the NIST Cybersecurity Framework and CIS Controls.
• Expertise in threat modeling and vulnerability management.
• Hands-on experience with firewalls, endpoint protection, IDS/IPS, SIEM, and DLP solutions.
• Knowledge of encryption technologies, authentication protocols, and identity management solutions such as Microsoft Entra ID, SSO, and MFA.
• Hands-on experience securing Microsoft 365 and Azure environments, including identity, endpoint, and cloud security controls such as Conditional Access, Microsoft Purview, and Defender for Cloud, using a Zero Trust approach.
• Proficiency in incident response methodologies.
• Proven track record leading large-scale, complex IT and security initiatives.
• Strong written and verbal communication skills, including the ability to explain and present security risks to non-technical stakeholders and cross-functional teams.
• Ability to work in the Houston office at least three days per week and travel approximately 20%.

Nice To Haves

• Experience with penetration testing and forensic investigation tools.
• Experience with automation and scripting, such as Python or PowerShell, to streamline security operations.
• Familiarity with OT and industrial control system (ICS) security concepts and NERC CIP, and experience working alongside an OT security team.
• Certifications such as CISSP, CISM, CISA, CEH, or GIAC.

Responsibilities

• Develop and implement a cybersecurity strategy aligned with organizational goals and industry best practices, with a focus on Microsoft 365 and Azure.
• Conduct risk assessments, develop mitigation plans, monitor emerging threats and regulatory requirements, and recommend and implement security, reliability, and performance improvements.
• Lead and mentor cybersecurity professionals, support their skill development and collaboration, and allocate resources across operational and project initiatives.
• Oversee configuration, deployment, and maintenance of security tools, including firewalls, endpoint protection, IDS/IPS, and SIEM solutions.
• Establish and enforce organization-wide security policies, procedures, and controls.
• Develop and manage the incident response plan; coordinate responses to breaches or attacks; conduct post-incident analyses and improve preventive measures.
• Collaborate with IT and business units on disaster recovery and business continuity planning.
• Ensure compliance with applicable laws, regulations, and standards, including SOX IT general controls and ISO 27001, and report cybersecurity status, risks, and mitigation efforts to senior leadership.
• Partner with the OT cybersecurity function on corporate IT and plant-system integration points, addressing IT-side security controls, risk, performance, and total cost of ownership.
• Provide architectural assessments, strategies, and roadmaps for systems selection and implementation; define technical evaluation criteria and approaches; assess existing architecture and recommend improvements; and maintain security documentation and licensing.
• Manage the cybersecurity budget and evaluate and negotiate vendor contracts for cost-effectiveness and alignment with business requirements.
• Build a service-oriented security team that provides responsive user support.
• Conduct security awareness training on best practices and emerging threats.

Benefits

• Medical, dental, and vision plan options.
• Employer-paid basic life insurance and short-term and long-term disability coverage.
• 401(k) plan with up to 6% match.
• Flexible paid time off and paid parental leave.
• Family-building, fertility, hormonal health, pregnancy, postpartum, and parenting support through Carrot.
• Dependent care FSA for eligible child and elder care expenses.
• Annual Lifestyle Spending Account for eligible wellness expenses, including fitness, financial planning, pet insurance, and pet care.
• Employee ownership opportunities through the Employee Stock Purchase Program, stock option grants, and bonus opportunities for eligible roles.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager