Director of Information Security

Join our Growing Team and see why Summit Utilities, Inc was named as one of the Fastest Growing Denver Area Private Companies 2019 and 2020;
Best Places to Work in Maine 2019, 2020, 2021, 2022 and 2023; and Best Places to Work in Arkansas 2020 and 2023, Oklahoma 2022 and 2023 and Missouri 2023. Summit was also recently named one of Forbes 2023 America’s Best Small Employers. Summit is a growing natural gas utility providing safe, reliable and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri, Oklahoma, and Texas.

Being part of the Summit team means embracing excellence and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers and the communities where we live. We aim to bring warmth and energy to everything we do.

• Lead the design, implementation, and continuous improvement of Summit’s enterprise information security program — covering cybersecurity, AI and data protection, risk management, and incident response.
• Ensure strong alignment between security strategy, business goals, and regulatory requirements, particularly in the context of emerging AI use cases, machine learning models, and data governance.
• Oversee the IT Business Continuity and Disaster Recovery (BCP/DR) programs, including Business Impact Analysis (BIA) and scenario-based recovery exercises.
• Develop and enforce comprehensive policies, standards, and procedures aligned with frameworks such as NIST CSF 2.0, C2M2, and ISO 27001.
• Partner with data, application, and operations leaders to ensure secure design, access control, and model integrity across AI and analytics systems.
• Direct risk assessments and audits to identify vulnerabilities, ensuring mitigation strategies are financially sound and proportionate to organizational risk appetite.
• Maintain strict adherence to financial controls — including vendor spend, contract review, and security-related procurement — demonstrating accountability for budget stewardship and cost transparency.
• Lead and mentor a high-performing information security team, fostering a culture of ethics, service, and continuous learning.
• Serve as the executive liaison for internal and external audits, compliance reviews, and regulatory reporting related to cybersecurity.
• Stay ahead of evolving threats, particularly those involving AI misuse, data poisoning, and adversarial attacks, and integrate defenses into enterprise security posture.
• Provide executive-level reporting on risk posture, incidents, and metrics that connect security outcomes to business and financial value.

Education And Work Experience

• Bachelor’s or Master’s degree in information security, Computer Science, Information Technology, or a related field.
• 10+ years of experience in information security, including at least 5 years in a senior leadership or management capacity.
• Advanced security certifications strongly preferred (CISSP, CISM, CISA, CRISC, CCISO, etc.).
• Demonstrated experience managing security for cloud and hybrid environments, and integrating controls for AI, analytics, and data platforms.
• Proven record of financial accountability, including budget ownership, cost optimization, and vendor governance.
• Experience implementing and auditing against leading security frameworks (NIST CSF, C2M2, ISO 27001, SOC
  2) and regulatory standards (GDPR, HIPAA, PCI, etc.).

Knowledge, Skills, Abilities

• Deep expertise in cybersecurity, risk management, and incident response, including threat intelligence, vulnerability management, and data protection.
• Strong knowledge of AI and data security principles, including model governance, data ethics, and emerging threats tied to generative AI.
• Uncom…