Cyber Strategy and Advisory Services Lead (Bethpage, NY, US) - PSEG

Job Summary

This position is an experienced, senior level, hands-on technical lead, performing IT security functions and maintaining systems, while providing technical guidance to the team.  Aligns cybersecurity objectives, roadmaps, and projects with the needs of the broader business and IT strategies. Enables the completion of any remediation activities to address identified deficiencies. Develops, articulates, and refines the cybersecurity vision that underpins all cybersecurity activities. Responsible for engaging the lines of business and evangelizing cyber security. Oversees the cyber champions program for Long Island. Responsible for ensuring PSEG maintains NIST CSF Tier 3 maturity in all controls. Responsible for responding to all internal and external data calls and audits. 

Job Responsibilities

Responsibilities include:
•    Defines cybersecurity management approach to capture cybersecurity goals and provide a high-level activity roadmap in terms of mission and vision, organizational model, accountability and responsibility
•    Define the yearly cybersecurity project roadmap and goals, as well as building out a 3-5 year cybersecurity maturity roadmap with input from other cybersecurity, IT, and business stakeholders 
•    Oversees the cyber champions program for PSEG Long Island. 
•    Establish and maintain a NIST CSF maturity program. 
Align the cybersecurity strategy with relevant regulatory requirements and industry standards to ensure compliance
Respond to all cyber-related audit and information requests both internal and external to PSEG
 

Job Specific Qualifications

Required Qualifications:
•    Bachelors degree and 8 years of relevant cyber security experience
•    In lieu of a degree 12 years of cyber experience
•    Experience with Cyber strategy development.
•    Technical experience includes: information / data / network / computer security design, administration and/or assessment.
•    Experience with key information security technologies such as SIEM, firewalls, intrusion detection/prevention systems, vulnerability assessment, encryption, identity and access control systems, anti-malware, and security event analysis.
•    Demonstrated ability to effectively communicate with both technical and non-technical individuals.
•    Experience building and maintaining a solid working knowledge of Information Security principles and practices.
•    Demonstrated ability to follow cyber security news and alerts in order to understand complex attack vectors and risks including the ability to identify and evaluate emergent cyber security threats and vulnerabilities. 
•    Experience in recommending appropriate corrective actions for information security incidents and provides risk mitigation recommendations to management and team.
•    Must be able to work independently with little or no supervision.
•    Experience working in a team environment, with experience teaching and learning from other team members.
•    Ability to foster working relationships with the team, IT Management and Client departments.
•    Ability to explain technical concepts to the business users in the context of business requirements.

Please Note the Followin 
•    Approximately 5% Travel required
•    NERC CIP position, requires NERC CIP background investigation prior to start

Desired Qualifications:
•    Industry Security certifications such as SANS, CISSP, etc.
 

Minimum Years of Experience

Education

Certifications

Disclaimer

Certain positions at the Company may require you to have access to Part 810-Controlled Information.  Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information.  Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made.  If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.