RT Ops Security Spec Prin

American Electric Power•New Albany, OH

2d•$116,255 - $151,132•Onsite

About The Position

The Real Time Operations Security Specialist Principal is responsible for the development and execution of security strategies for operational technology systems. This role involves guiding a team of security professionals, ensuring compliance with industry standards and mentoring junior staff. This position also collaborates with executive leadership to align security strategies with business objectives.

Requirements

Minimum of an Associate’s degree in an applicable area OR equivalent education and experience of a high school diploma/GED and two (2) years of relevant experience in an applicable area or certification in an applicable area.
Eight (8) years of domain experience in a related role.
At least seven (7) years in cyber security with significant experience in OT security.
Proven leadership and communication skills
Demonstrated experience managing complex efforts.
Demonstrated substantial understanding of real time operations considerations such as redundancy/availability/isolation, conservative operation maintenance and patching strategies, real time monitoring and system downtime limitations with respect to Bulk Electric System risk, as well as a substantial understanding of SCADA, EMS, and related support systems.

Nice To Haves

Bachelor's degree is strongly preferred
advanced degree is an added plus
Advanced certification (CISSP, CISM, or other Security certification) strongly preferred.

Responsibilities

Develop and implement comprehensive OT security policies and frameworks.
Manage the work across a team and mentor junior staff.
Collaborate with executive leadership to align security strategies with business objectives.
Leads complex security projects/initiatives/incidents; directs security assignments.
Responsible for owning/maintaining multiple advanced complexity security assignments at a time.
Promotes adherence to enterprise's security policies, goals, and enabling characteristics.
Clearly and concisely expresses technical or non-technical ideas in activities and presentations.
Identifies, clarifies, resolves and initiates solutions to complex security problems that require extensive specialized knowledge.
Coaches team members to keep the enterprise as the focal point for all security activities.
Considers alternative courses of action and selects best options according to intended security posture.
Formulates work for self and/or others in a well-planned and organized manner, distributes the workload appropriately, and sets stretching objectives.
Guides other team members to understand the impact individual security and business decisions may have on the enterprise.
Demonstrates awareness of key security trends.
Vulnerability management, patch management, active directory administration, anti-virus and endpoint security, firewall ACL management, encryption and certificate management, security logging and alerting, and access/password management.
Complete all tasks with consideration for risk and impact to the SCADA/EMS system and the Bulk Electric System.