PRIMARY PURPOSE OF POSITION

Responsible for the cybersecurity plans, strategy and policy for the Constellation Real Time Systems to support and align with the Constellation Security posture and the associated regulatory requirements. Responsible for the development of collaborative requirements to translate functional requirements into secure technical solutions.

PRIMARY DUTIES AND ACCOUNTABILITIES

• Responsible for the translation of functional security and regulatory requirements into secure technical solutions.
• Lead the oversight of security and/or cybersecurity policies and controls to ensure system analysis meets security requirements.
• Provide leadership and guidance to team and stakeholders regarding NERC CIP technical requirements and compliance more broadly.
• Interpret and apply laws, regulations, policies, standards, or procedures to specific security control issues.
• Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission.
• Provide leadership for effective mitigation of security control issues or concerns.
• Develop, manage and enhance engagement with key stakeholders.
• Establish positive team environment by proactively assisting and training less experienced personnel.
• Provide performance and development feedback as required.
• Maintain and enhance cyber technical knowledge and business acumen within the energy industry.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Computer Science or related discipline and typically 8 to 10 years of experience in information security and/or cybersecurity policy or equivalent combination of education and work experience.
• Strong knowledge of business practices and processes in a cyber regulatory environment including regulations such as NERC CIP, TSA Gas Pipeline, CUI/CMMC, Maritime-TSA, etc.
• Deep understanding of control frameworks such as NIST, COBIT, etc.
• Experience leading projects or teams and knowledge of project management.
• Strong problem solving and analysis ability.
• Excellent communications skills (written and verbal)
• Ability to lead remote or hybrid teams/individuals

PREFERRED QUALIFICATIONS

• Demonstrated experience with cyber regulated requirements for the energy sector.
• Strong background in technical control oversight/audit practices.
• Deep understanding of risk assessment concepts and approaches.
• Experience with effective investigation processes such as extent of condition, root cause analysis and mitigation expectations.