Director, Cybersecurity

Competitive Power Ventures, Inc. (“CPV”), with headquarters in Silver Spring, MD, and offices in Braintree, MA and Sugar Land, TX, is uniquely positioned to leverage global technology and financial partnerships to help modernize America’s power generation. We are driven to improve our energy infrastructure by developing and operating power generation facilities using cutting edge, domestically available natural gas, and renewable power technology.

CPV is owned by OPC Energy, the first privately held electric company in Israel. OPC Energy became a public company in August 2017 and is traded on the Tel-Aviv Stock Exchange (TASE: OPCE).

CPV is seeking a Director of Cybersecurity to join our Information Technology Department in our Silver Spring, MD office.

The Director will work closely with Information Technology, Operational Technology, Asset Management, Energy Management, Application Services, Legal, Human Resources, Internal Audit, business leaders, and third-party service providers to identify, communicate, prioritize, and manage cybersecurity risks appropriately.

The position requires a leader who can operate effectively at both the strategic and technical levels, translating cybersecurity risks into business terms for senior management while providing direction and oversight for cybersecurity technologies, processes, and personnel.

• Develop, maintain, and execute CPV’s enterprise cybersecurity strategy and multi-year cybersecurity roadmap.
• Advise the Vice President of Information Technology and senior management on cybersecurity risks, emerging threats, regulatory developments, and recommended investments.
• Establish cybersecurity priorities based on business risk, regulatory requirements, operational requirements, and CPV’s risk tolerance.
• Develop annual cybersecurity objectives, budgets, initiatives, and performance metrics.
• Provide cybersecurity leadership across corporate IT, cloud, SaaS, data, and OT environments.
• Coordinate cybersecurity activities across CPV’s corporate offices and generation assets
• Manage cybersecurity personnel, consultants, managed security providers, and other third-party cybersecurity resources.
• Develop, maintain, and enforce CPV cybersecurity policies, standards, procedures, and technical controls.
• Maintain governance over areas including access management, privileged access, change management, vulnerability management, incident response, data protection, third-party security, remote access, and artificial intelligence.
• Establish cybersecurity metrics and Key Risk Indicators (KRIs) to measure the effectiveness and maturity of CPV’s cybersecurity program.
• Lead enterprise cybersecurity risk assessments and maintain visibility into significant cyber risks.
• Coordinate vulnerability assessments, penetration testing, security reviews, and remediation programs.
• Ensure vulnerabilities and cybersecurity findings are appropriately prioritized, assigned, tracked, and remediated.

• Provide leadership and oversight for CPV’s cybersecurity monitoring and security operations capabilities.
• Oversee endpoint security, identity security, email security, cloud security, network security, vulnerability management, threat detection, and security monitoring.

• Own and maintain CPV’s cybersecurity incident response program.
• Maintain cybersecurity incident response plans, escalation procedures, communications protocols, and response playbooks.
• Coordinate cybersecurity tabletop exercises and incident simulations with IT, OT, Legal, Communications, Human Resources, Asset Management, and senior leadership.
• Partner with Infrastructure & Operations and business stakeholders to support disaster recovery and business continuity…