Director, Enterprise Security

We are looking for talented individuals who are passionate about making an impact in the company and the community.
Apply now and become part of the dynamic energy industry!

Are you a strategic security leader who can balance risk, reliability, compliance, and innovation? Join Tucson Electric Power as our Director of Enterprise Security and help protect the critical technology, infrastructure, and operations that power our communities every day.

As a member of the IT Leadership Team, you will shape enterprise security strategy, influence technology decisions, and lead multidisciplinary teams responsible for cybersecurity, operational technology (OT) security, physical security, identity and access management, and governance, risk, and compliance.

• Lead TEP's enterprise security strategy and roadmap across cybersecurity, OT security, physical security, IAM, and compliance.
• Partner with executive leadership to align security investments and priorities with business objectives.
• Strengthen cyber resilience, incident response capabilities, and enterprise risk management programs.
• Advance cloud security, Zero Trust initiatives, and secure-by-design technology practices.
• Collaborate with operations and engineering leaders to protect critical infrastructure while support reliability and operational excellence.
• Lead and develop high-performing teams while overseeing budgets, vendors, and strategic security investments.

• Bachelor's degree in Information Security, Computer Science, Engineering, Business, or a related field, or equivalent experience.
• 8+ years of progressive leadership experience in enterprise security, risk, technology, or critical infrastructure environments.
• Experience leading enterprise security programs and influencing executive stakeholders.
• Knowledge of regulatory, compliance, and audit requirements.
• Experience working across both IT and operational technology (OT) environments.
• Strong executive communication, collaboration, and leadership skills.

• Utility, energy, or critical infrastructure experience; cloud security and Zero Trust transformation expertise; relevant certifications such as CISSP, CISM, CRISC, CCSP, GICSP, or PMP.

This role provides strategic leadership, governance, and execution across Cybersecurity (IT and OT), Physical Security, Identity & Access Management, and Enterprise Compliance in a highly regulated utility environment.

This role is a key member of the IT Leadership Team, serving as a strategic partner to the CIO and a peer to other senior IT leaders. The Director collaborates in establishing and executing the enterprise IT vision, strategy, architecture, and investment priorities, ensuring security is embedded into all technology decisions and initiatives.

The Director defines and executes a comprehensive enterprise security strategy that protects critical infrastructure, ensures regulatory compliance, enables a Cloud First operating model, and maintains customer, regulator, and stakeholder trust. The role partners closely with executive leadership, operational organizations, and business stakeholders to balance security, reliability, safety, cost, and innovation, ensuring that security investments are risk‑informed, financially responsible, and clearly tied to business value, regulatory obligations, operational resilience, and measurable risk reduction.

• Serve as the enterprise leader accountable for all security domains, including IT cybersecurity, OT cybersecurity, physical security, identity and access management, and compliance.
• Define, maintain, and execute a multiyear Enterprise Security Strategy and roadmap aligned with company strategy, IT strategy, regulatory requirements, and operational priorities.
• Establish enterprise security governance, metrics, and executive reporting, including risk posture, maturity indicators, and investment effectiveness.
• Act as the primary security and risk advisor to the CIO and executive leadership. As appropriate, develop and present materials to these stakeholders in support of the security function.
• Partner with Enterprise Risk Management to identify, quantify, communicate, and monitor enterprise security risks.

• Serve as an active, peer-level member of the IT Leadership Team, contributing to enterprise IT strategy, operating model, and transformation roadmap.
• Partner with senior IT leaders across infrastructure, applications, data, architecture, and operations to advance secure‑by‑design practices, with clear exception, risk acceptance, and prioritization processes.
• Partner with senior leaders across the organization to amplify and achieve security goals.
• Influence enterprise technology investment and architectural decisions through…