Manager, Security Platforms

Colonial Pipeline Company•Atlanta, GA

9d•Onsite

About The Position

The Manager, Security Platforms leads the engineering, administration, operational support, and lifecycle management of Colonial Pipeline's enterprise cybersecurity platforms. This role executes platform strategy, architecture direction, and governance standards established by security leadership while guiding a team of security engineers responsible for secure, reliable, scalable, and compliant technologies across Information Technology (IT) and Operational Technology (OT) environments, including Industrial Control Systems (ICS) supporting critical infrastructure. You will support platform roadmaps, technology budgets and renewals, audit and regulatory requirements, vendor relationships, and cross-functional partnerships. The portfolio includes endpoint security, privileged access management, identity and access management, threat detection and response, SIEM and log management, internet and email security, DDoS protection, vulnerability management, and related security technologies. The Manager, Security Platforms can be a successor to the CISO.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, Business Administration, or a related field of study. A combination of experience and education will be considered
5+ years of progressive experience in information technology, cybersecurity, security engineering, or a related discipline.
3+ years of technical leadership, team leadership, or people management experience.
Experience administering enterprise security technologies and supporting cybersecurity programs.
Experience supporting security audits, regulatory requirements, and risk management initiatives.
Experience supporting technology projects, budgets, vendor relationships, and procurement activities.
Experience supporting Industrial Control Systems (ICS) or Operational Technology (OT) within a critical infrastructure environment.
Knowledge of cybersecurity principles, security architecture, defense-in-depth strategies, security controls, and enterprise security platforms.
Understanding of regulatory frameworks and industry standards, including NIST, TSA Security Directives, SOX, CIS Controls, and ISO 27001.
Ability to translate complex technical concepts for technical and non-technical audiences, make sound operational decisions, manage competing priorities, and collaborate across functions.

Nice To Haves

Master's degree in Cyber Security, Information Technology, Business Administration, Engineering, or a related discipline.
7+ years of experience supporting or leading cybersecurity engineering or security platform teams.
Experience within critical infrastructure, utility, energy, or another highly regulated industry.
Experience with endpoint security, SIEM, cloud security, identity security, network security, and security monitoring platforms.
Experience with OT/ICS security tooling, PKI/certificate management, software supply chain security platforms, cybersecurity transformation, or modernization initiatives.
Experience with critical infrastructure regulatory frameworks, such as TSA Security Directives, as they apply to IT and OT security tooling.
CISSP, CISM, CISA, CRISC, GIAC, or vendor certifications relevant to supported security technologies.

Responsibilities

Lead the design, implementation, configuration, administration, maintenance, and support of enterprise security platforms across IT and OT/ICS environments.
Oversee platform lifecycle activities, including upgrades, patching, migrations, modernization, technical debt reduction, resiliency, disaster recovery, and business continuity.
Direct troubleshooting, root cause analysis, and remediation, and establish operational metrics, service-level objectives, monitoring processes, and support procedures.
Oversee software supply chain and artifact security tooling and support secrets management and credential provisioning integrations for CI/CD and build pipelines.
Support platform standards, reference architectures, architecture reviews, proof-of-concept evaluations, technology assessments, and investment recommendations established by security leadership.
Lead remediation for audit findings, management action plans, and security control deficiencies while supporting SOX, TSA Security Directives, internal controls, and other regulatory requirements.
Manage, develop, coach, and mentor Security Platform Engineers and assigned personnel, including goal setting, development planning, staffing, hiring, onboarding, training, and certification needs.
Manage security platform initiatives from planning through implementation and operational transition, including charters, implementation plans, resource forecasts, sprint planning, backlog prioritization, and status reporting.
Administer assigned budgets and forecasts and manage licensing, renewals, support agreements, purchase orders, statements of work, vendor health checks, and roadmap reviews.
Communicate platform performance, project status, risks, and resource needs while building strong relationships across Security Operations, Infrastructure, Application Support, Physical Security, Internal Audit, Procurement, Legal, and the business.
Consistently demonstrate Colonial Pipeline core values of Respect, Accountability, Innovation, Safety, and Excellence, and support emergency response efforts when assigned.