Senior Cybersecurity Architect

Senior Cybersecurity Architect

Duration: 17 Months

Location: Oakland, CA 94612 (Hybrid Onsite requiring candidate to be onsite as needed)

Positions Available: 1. Senior Cybersecurity Architect – AI/ML; 2. Senior Cybersecurity Architect – Operational Technologies

• Minimum: B.S. degree in Computer Science, Information Systems, or related field, or equivalent experience.
• Desired: Master’s degree in computer science or related discipline or equivalent experience.

• Minimum: 8 years of combined IT, critical infrastructure, intelligence, and/or cyber/information security work experience.
• Desired: Utility industry experience; experience in Information Technology security, multi‑platform, or related; experience in operational technology security.

• Minimum: CompTIA Security+, SANS, Cisco, GIAC, Microsoft Security, or equivalent certificates.
• Desired: Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or equivalent.

• Liaison between the company's Cybersecurity Department and regulatory agencies.
• Participate/lead steering committees for key security committees.
• Lead large enterprise‑wide cybersecurity programs and initiatives.
• Provide strategic guidance for development of the operating plan and budget.
• Lead large enterprise‑wide cybersecurity strategy roadmaps.
• Oversee detailed living risk portfolio describing the overall aggregated risk posture of each business unit.
• Evaluate AI/ML models for algorithmic bias, data leakage, adversarial attacks (e.g., prompt injection), and structural integrity before and after deployment.
• Ensure AI tools adhere to emerging global governance frameworks, such as the NIST AI Risk Management Framework.
• Collaborate with legal teams to establish usage policies and create "harm taxonomies" that predict and prevent potential misuse of frontier AI models.
• Conduct consequence‑based risk assessments on Industrial Control Systems (ICS), SCADA systems, and PLCs to uncover vulnerabilities.
• Develop and implement OT‑specific security policies aligned with standards like NIST 800‑82.

• Effective communication to peers and clients.
• Able to balance business priorities and maintain a customer‑focused approach.
• Multi‑platform knowledge (UNIX/Linux, Windows Servers/Desktops, Cisco hardware, etc.).
• Ability to influence and lead behavior change.
• Strong analytical, critical thinking, and decision‑making skills.
• Solid understanding of the company's critical business processes, applications, systems, and network security, ODN and UDN.
• Master knowledge of cyber/information security management policies, procedures, regulations, and governance processes, information systems/network security, system security analysis, and information assurance compliance.
• Master knowledge of risk management techniques, technological trends, and developments in cyber/information security, systems/software development, engineering, integration, testing, evaluation, and operating systems.
• Master knowledge of applicable and accepted security standards and frameworks (NIST, ISO, etc.) and regulatory and compliance requirements such as SOX, NERC CIP, CCPA, HIPAA, NRC, etc.
• Master knowledge of performing cybersecurity and compliance assessments.