Manager, IT Cybersecurity
The Cybersecurity Manager leads and coordinates cybersecurity operations, governance execution, and security technology programs across IT Shared Services, providing operational and strategic leadership for enterprise IT environments. This role oversees key cybersecurity functions including coordination with a third-party Security Operations Center (SOC), Identity & Access Management and Identity Governance (IAM/IGA), vulnerability management, data security, and security awareness initiatives. The Cybersecurity Manager continuously improves cybersecurity capabilities aligned with industry-recognized frameworks (such as the NIST Cybersecurity Framework) while advancing program maturity using CMMI-based practices. The position ensures cybersecurity controls and operational processes align with the organization's defined risk appetite and partners closely with Infrastructure, IT, Compliance, Risk, and business stakeholders to ensure effective implementation, clear accountability, and consistent security outcomes. This position is directly accountable for the timely completion of high-quality products and services in addition to budget management, performance management, personnel development, resource utilization, technical directions, and team dynamics. Ensures staff compliance with all applicable laws, regulations, industry standards, corporate policies, guidelines and procedures, including but not limited to, SOX, RUS, OSHA, NERC, FERC and ITS requirements. Promotes an environment of compliance and continuous improvement to meet the Corporation's goals and objectives. Job Duties: Strategic Management : Works closely with IT and business stakeholders to understand their IT security needs and aligns these needs with strategic initiatives. Develops and maintains IT security policies and processes. Identifies, prioritizes, and develops new solution ideas and leads the implementation of chosen initiatives that integrate company strategy and best practices. Ensures the department's ability to manage change based on evolving business needs and security requirements. Relationship Management: Builds and maintains positive relationships with IT peers and business stakeholders, ensuring a high level of customer satisfaction. Understands stakeholders' requirements and stays apprised of their operating environments to ensure accuracy and value in the security services rendered. Communicates clearly, effectively, and on a timely basis, fostering an environment where stakeholders feel comfortable bringing issues, concerns, and opportunities for exploration. Financial Management : Manages the budget for IT Cybersecurity, ensuring adherence to budgets and strategic plans. Directs the preparation, review, and consolidation of department budgets, projections, and variance analysis. Develops and manages annual budget, performs monthly forecasts, and oversees routine cost-management duties, such as overseeing expenditures and developing and administering contracts and purchase orders. Personnel Management: Manages individual and departmental team performance towards achieving desired results and client perceptions. Ensures that experienced and knowledgeable personnel are hired and retained. Monitors progress of associates' work to ensure deliverables meet the expectations of management and clients. Provides feedback to associates regarding their work, skills, and development. Trains associates to ensure optimum staff development and coverage plans are in place. Leadership: Communicates a vision, strategy, and initiatives that inspire the team to succeed. Sets and models standards for integrity, cooperation, and work habits. Leads the department in research and development of strategic programs and services for OPC, GTC, GSOC, and the Members. Administration: Manages the execution of routine departmental tasks. Provides department reporting and operational metrics. Administers the execution of personnel-related tasks, e.g., timesheets, compensation, etc. Operations Management: The Cybersecurity Manager ensures efficient, secure, and high-quality operation of the organization's cybersecurity function across IT Shared Services by leading security operations, policy and standards execution, and continuous improvement aligned with industry-recognized cybersecurity frameworks and regulatory requirements. The role oversees third-party SOC performance for threat monitoring, incident response, and forensics; leads IAM and IGA programs including identity architecture, privileged access management, and secure integration with cloud identity providers; and owns the vulnerability management program while partnering with Infrastructure teams responsible for patch deployment. Additional responsibilities include data protection controls, security architecture and engineering, security awareness and training, and coordination of incident response, disaster recovery security activities, penetration testing, threat intelligence, vendor security reviews, and privacy-related security controls. The Cybersecurity Manager drives automation, operational maturity, and consistency while maintaining clear accountability boundaries between cybersecurity oversight and infrastructure execution. Required Qualifications: Education : Bachelor Degree in Cybersecurity, Computer Science, IT, Information Systems, or related field. Experience : 10 years in the area of Cybersecurity, IT Security, Network Security, IT Infrastructure, Cloud infrastructure, Virtualization, Business Analyst, IT, or Technology Equivalent Experience: Associates Degree in Computer Science, Business Administration, IT, Engineering, or related field with at least 14 years of experience with Cybersecurity, IT Security, Network Security, IT Infrastructure, Cloud infrastructure, Virtualization, Business Analyst, IT, or Technology with at least 5 years of experience in a supervisory or leadership role. Eighteen (18) years of direct experience in the experience areas defined above in addition to at least 5 years of experience in a supervisory or leadership role. Licenses, Certifications, and/or Registrations: Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM) desired. Specialized Skills: Strong verbal and written communication skills, excellent organization and time management skills, analytical and creative problem-solving skills, ability to establish and maintain effective working relationships as necessitated by the work.
