Manager - Cyber Operations

Purpose

Manager – Cyber Operations primary function is to manage operational activities related to the execution of the Avangrid Networks information security roadmap and manage the day‑to‑day workload of the Avangrid Networks security/NERC operations team. This position provides leadership and support across Avangrid Networks to balance real‑world risks with business drivers such as reliability, speed, agility, flexibility, and performance. The role assures maintenance and support of infrastructure assets across Avangrid Networks.

Job Title:

Manager – Cyber Operations

Location:

Rochester, NY
Salary Range: $128,320 – $160,400

Schedule:

On Site – Office

• Ensure security services and solutions are operated in compliance with industry best practices as well as applicable privacy and legal/regulatory requirements including GDPR, SOX, CEII, and NERC.
• Follow applicable federal agency guidance on security operations practices relevant to Grid Modernization and assess impact on Avangrid Networks business model.
• Ensure that security services and solutions are well defined, highly available, repeatable, and are constantly measured for key performance, key risk, and key operational level metrics.
• Develop reports, dashboards, and metrics for cyber operations and present to OSG Management.
• Enhance NERC operations team with advanced techniques and technologies such as automation of manual related efforts.
• Lead, develop, and maintain Operations Security policies, rules, standards, and guidelines.
• Oversee employees completing cyber vulnerability assessments, SPR’s, OT NOW and IT NOW workflows that ensure NERC/CIP.
• Oversee employees managing Protection Systems applications to ensure the safety of the Operational Smart Grids IT and OT systems.
• Ensure that network infrastructure such as firewalls, routers, and switches are implemented and operated in compliance with documented policies and procedures.
• Ensure that system security controls such as system hardening, vulnerability/patch management, account management, system baselines, change control, and mobile/transient devices are implemented and operated in compliance with documented policies and procedures.
• Understanding of data analytics and associated technologies.
• Ability to define, manage and lead our data initiatives to blend our cybersecurity data into a data lake that can produce useful insights and reports.
• Improve current vulnerability management workstream while managing internal/external relationships, communicating to impacted areas, creating and maintaining dashboards, and automating and coordinating deployments.

• Master’s Degree in Engineering, Computer Science, or a technical related degree with a minimum of 4+ years’ experience in IT/OT, NERC/CIP and/or Cybersecurity; or
• Bachelor’s Degree in Engineering, Computer Science, or a technical related degree with a minimum of 6–8 years’ experience in IT/OT, NERC/CIP and/or Cybersecurity.
• Associate Degree in Engineering, Computer Science, or a technical related degree with a minimum of 8+ years’ experience in IT/OT, NERC/CIP and/or Cybersecurity.
• No Degree with a minimum of 15+ years’ experience in IT/OT, NERC/CIP and/or Cybersecurity.
• Experience with key security process and procedures (system hardening, patch management, vulnerability management, supplier management).
• Supervisory / Manager experience over staff, projects, or contractors.
• 2+ years of Data Center and OT Infrastructure experience.
• Preferred experience of 5+ years in Business Decision Support including Cybersecurity Operations and Performance/Metrics reporting.
• Preferred experience with Access Controls systems and solutions (SSO, AD, TACACS, MFA, cloud based).
• Preferred experience with a variety of information and network security infrastructure and tools (IDS/IPS, firewall, WAF, configuration management).

• Strong understanding of applicable NERC/CIP Standards.
• Strong communication written and verbal skills related to cybersecurity technology.
• Strong system engineering and advanced networking.
• Strong understanding of current and future state of cyberspace.
• A team-focused mentality with the proven ability to…