Sr Mgr, Cyber Technical Compliance

Constellation Energy Generation, LLC.•Sacramento, CA

About The Position

This role is for a Senior Manager responsible for the daily management and operational oversight of Cyber Technical Compliance. This includes core functions associated with protecting the company's regulated cyber assets, information, and operations. The position oversees the Cyber Regulatory Compliance Support team and the Cyber Technical Regulatory Tool Support team, with personnel located in multiple areas. The Senior Manager will collaborate closely with IT and Business leadership to achieve objectives and is accountable for executing corporate and departmental strategies against established goals for all teams. This role will lead a total staff of 8-15 full-time employees, plus contract labor and third-party professional services. The position assists in managing an overall budget of up to $10 Million annually for Operations & Maintenance (O&M), plus annual capital investment. This role has a significant impact on Constellation's ability to secure information, demonstrate compliance with multiple regulatory requirements, and maintain company reputation and performance. Performance results can positively or negatively impact earnings per share through company reputation, investor confidence, compliance penalties, and intellectual property protection. The Senior Manager will participate as part of the overall leadership team for the Corporate Cyber Security organization and reports to the Director, Cyber Governance and Compliance.

Requirements

Demonstrated operational planning, consulting, execution and improvement, combined with customer engagement skills and experience leading teams and people through organizational and operational change
Knowledge of IT infrastructure technologies including network, server, storage, telecom data center support and monitoring tools
Superior written and verbal skills communications skills and experience creating high quality presentations for executive audiences
Demonstrated ability to discuss and present complex technical information in a way that establishes rapport, persuades others, and gains understanding and approval
Excellent consultative skills, including teamwork, facilitation, prioritization, and negotiation
Availability for occasional travel to various work locations, external liaison activities and vendor locations.
Available for 24x7 on-call response to operational events and incident response
Track record of successfully developing, implementing and optimizing Cyber Security operational Centers and Teams.
Bachelor's degree in IT, Computer Science or related discipline and 10+ years of relevant experience in Cyber Security or field, or equivalent combination of education and experience
Extensive experience with management/oversight of complex technical regulated control environments - NERC CIP, TSA Gas, MTSA, etc
Deep technical knowledge of effective cyber security control design/architecture and frameworks, NIST, etc.
Strategic and polished leader with experience guiding and influencing many stakeholders through complex decisions and changes
Knowledge and experience with regulatory security Standards such as NERC CIP, TSA Gas, Maritime Transportation System, FCI/CUI, etc.

Nice To Haves

Extensive professional network across the Executive Branch of the Federal Government, DOE, DHS, DoD, FBI public and private sector cyber security companies, consortiums and associations
General Info Security: Security Principles, Threat Lifecycle Management, Incident Management & Lifecycle, Familiarity with Industry Standards (NIST 800-53, ISO 27001, etc.) and Security operations best practices.
Knowledge of network protocols (e.g., Transmission Control Protocol/Internet Protocol [TCP/IP], Dynamic Host Configuration Protocol [ DHCP] and directory services (e.g., Domain Name System [DNS], Active Directory)
Knowledge of incident categories, incident responses, and timelines for responses
Knowledge of incident response and handling methodologies
Knowledge of digital forensics and eDiscovery methodologies and processes
Masters degree in a technology discipline or MBA with one or more certifications relevant to Information Security Body of Knowledge (i.e. CISM, CISSP, CISA)
Track record of successfully implementing and optimizing the use of the NIST Cyber Security Framework and Cybersecurity Capability Maturity Models (C2M2) focused on the energy sector
Knowledge of Network Security monitoring and Cyber Security Systems Engineering best practices and operational processes

Responsibilities

Develop, recruit and retain a diverse, capable, high performance Cyber Security work force.
Evaluate performance and provide coaching for IT personnel. Promote diversity and foster teamwork, collaboration, and a learning organization.
Provide input on development and retention processes.
Develop and participate in external liaison relationships to share, learn and influence 3rd party Cyber Security Operations viewpoints and best practices.
Serve as Functional Area Manager (FAM) for assigned Management Model governing documents.
Lead teams delivering Cyber Regulatory Compliance support and Cyber Technical Regulatory Tool support across Constellation, and establish, measure, and achieve annual strategy, goals, and objectives.
Provide technical and security leadership to IT, business leadership, and technical teams to identify cost effective secure technology solutions and develop security reference architectures and strategies that support business outcomes.
Establish, maintain, and enhance service relationships with Business and IT/OT leadership and technical teams, and communicate status to key stakeholders on a regular basis.
Develop, maintain, and promote a Cyber Regulatory Control Implementation framework and support model across IT, Business, and corporate support organizations to deliver timely, cost effective, and consistently high quality regulatory support.
Leverage Constellation Management Model, Standards, and Industry best practices to establish and sustain high quality Cyber Security capabilities and service levels, with specific emphasis on Cyber Regulatory Compliance support and Cyber Technical Regulatory Tool support.
Assist in managing a budget totaling up to $10 Million O&M annually, plus Capital Investment Budget.