Manager, Information Security

Manager, Information Security

Full Time Management Chandler, AZ, US

Nova Source Power Services is the world’s #1-ranked solar operations and maintenance (O&M) provider and insight-driven total asset optimization partner for renewables asset owners ready to fuel smart growth. With over 20 years of operating experience and a presence on 5 continents, Nova Source has the global reach and strategic capabilities to achieve our clients’ renewables goals around the world.

Nova Source’s comprehensive approach to total asset optimization in addition to O&M services includes value engineering, performance analysis, strategic supply chain management, and advanced monitoring systems. The company operates in key global markets managing over 30GW of solar power plants. Nova Source’s expertise extends beyond solar and includes battery energy storage systems (BESS), offering a complete suite of services for the evolving renewable energy landscape.

The Manager, Information Security is responsible for managing the day-to-day operations of the Information Security function, supporting the implementation of cybersecurity programs, maintaining security controls, and ensuring compliance with applicable regulatory and company security requirements. This role partners closely with Information Technology, Engineering, and Operations to protect corporate and operational technology environments while supporting the organization's overall cybersecurity strategy.

• 5+ years of experience in Information Security, Infrastructure Services, OT Security, or related fields.
• 2+ years leading technical teams.
• Experience implementing cybersecurity policies, procedures, and controls.
• Experience supporting regulatory compliance programs, preferably NERC CIP.
• Experience conducting security and risk assessments.
• Experience with incident response, threat monitoring, IAM, and vulnerability management.

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related discipline.
• Relevant certifications preferred (CISSP, CISM, GIAC, Security+, PMP).
• Advanced degree preferred but not required.

• Experience managing cybersecurity vendors and security technologies.
• Experience implementing and administering information security policies, technologies, controls, and management processes.
• Knowledge of NERC CIP standards and data privacy requirements.
• Experience with ITIL processes.
• Strong analytical, problem-solving, and project management skills.
• Experience with SIEM, endpoint security, vulnerability management, and identity governance platforms.
• Knowledge of NIST CSF, CIS Controls, and ISO 27001 preferred.

• Manage the day-to-day activities of the Information Security team, providing coaching, guidance, and performance management.
• Build, develop, and retain a high-performing information security organization.
• Establish clear performance expectations, career-development plans, and succession strategies.
• Foster a culture of accountability, continuous improvement, and cybersecurity awareness.
• Promote business partnership and consultative engagement across the enterprise.
• Support the execution of cybersecurity programs and initiatives that align with business objectives and regulatory requirements.
• Manage security operations across corporate, cloud, and operational technology (OT) environments, including monitoring, incident response, identity and access management, and vulnerability management.
• Implement and maintain security controls, standards, and procedures to protect company information systems and assets.
• Coordinate cybersecurity activities supporting NERC CIP compliance, regulatory audits, and security assessments.
• Conduct security risk assessments, identify vulnerabilities, and partner with stakeholders to implement remediation plans.
• Support security architecture reviews, technology implementations, and system changes to ensure compliance with established security standards.
• Partner with IT, Engineering, Operations, and business teams to address cybersecurity risks and support secure business operations.
• Review…