Manager Security Operations & Cyber Assurance PSEG LI - PSEG
Bethpage, NY
About the Job
Requisition : 78528
PSEG Company: PSEG Long Island
Salary Range : $ 129,000 - $ 211,900
Incentive : PIP 20%
Work Location Category : Remote Local
PSEG operates under a Flexible Work Model where flexible work is offered when job requirements allow. In support of this model, roles have been categorized into one of four work location categories: onsite roles, hybrid roles that are a blend of onsite and remote work, remote local roles that are primarily home-based but require some level of purpose-driven in-person interaction and living within a commutable distance, and remote non-local roles that can be effectively performed remotely with the ability to work in approved states.
We want you to be healthy, balanced, and feel secure. That’s why you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k) with company match, company paid life insurance, tuition reimbursement and a minimum of 18 days of paid time off per year.
PSEG offers a unique experience to our more than 12,000 employees – we provide the resources and opportunities for career development that come with being a Fortune 500 company, as well as the attention, camaraderie and care for one another you might typically associate with a small business. Our focus on combatting climate change through clean energy technology, our new net zero climate vision for 2030 and enhanced commitment to diversity, equity and inclusion; and supporting the communities we serve make this a particularly exciting time to join PSEG.
Job Summary
The leader of Security Operations and Response leads the development, implementation, and ongoing coordination of an enterprise-wide cyber security operations and response program including Security Monitoring, Detection, Sec Ops Tools & Automation, Vulnerability Management, Cyber Threat Monitoring, Incident Response, Cyber Resiliency, Threat Intel, & Cyber Threat Hunting. Coordinates among all lines of business and service departments, as well as external risk organizations (Law Enforcement, E-ISAC, and other cyber industry trade organizations) and peer energy companies, as PSEG’s senior leader responsible for Security Operations and Response which includes enhance security operations and response capabilities (e.g. people, process, & technologies). In addition, this lead is responsible for defining and aligning security policies, strategy, standards and govern day to day security operations which includes oversight of a managed service provider for SOC services as well as maintaining an Incident Response program to ensure that the appropriate responses to various types of cybersecurity incidents. This individual, during a cyber incident may be designated as lead cyber incident commander and responsible for the containment, eradication, and recovery (as applicable) from an incident. The portfolio included in this security pillar includes multiple discrete projects/enhancements per year for security capabilities within this remit. The leader of Security Operations & Cyber Assurance engages across the entire IT, OT, and managed services. This individual is responsible to ensure appropriate maturity of controls within their remit.
Job Responsibilities
+ Direct, coach and counsel Cyber resources (internal and external) on SecOps technology consisting of Security Monitoring, Detection, Sec Ops Tools & Automation, Cyber Threat Monitoring, Incident Response, Cyber Resiliency, Threat Intel, & Cyber Hunting for both IT and OT functions in all facets of Security Operations and Response service delivery. Ensure that the Security Operations service delivery aligns with the corporate strategic Information Technology plan, inclusive of development of security operations standards, capacity planning, lifecycle management plans, solution selection, and partner management. Ensure scalability of Security Operations and Response function & tools for hardware and software to meet cyclical business needs & risk tolerance.
+ Develop and implement best practices for Security Operation and Response for PSEG. Participate in peer group meetings and benchmark Security Operations and Response objectives and tools with leading companies inside and outside the industry. Work with professional security operations and response associations, and consultants as required, to identify best practices
+ Interacts with Product, Technology teams, and various contracted IT resources. Operationalizing threat models to protect against existing and emerging threats.
+ Builds relationships with technology and business teams across the company. Interacts routinely with vendors, service providers, consultants/advisors, law enforcement agencies and professional organizations. Ensure that cyber operations requirements are identified, well defined, properly documented and approved by appropriate stakeholders.
+ Develop and manage SecOps capital and O&M budgets to meet business needs. Provide leadership in the identification of optimal O&M and capital allocations, inclusive of opportunities to reduce expenditures while transforming the way PSEG Security Operations and Response conducts its business. Lead and/or participate in business case development.
+ Evaluate performance, perform career development, coaching and counseling for SecOps staff.
Job Specific Qualifications
Required
+ Bachelors degree and 10 years of relevant cyber security experience
+ In lieu of a degree 14 years of cyber experience
+ Demonstrated Strong leadership and influence skills
+ Demonstrated strong presentation skills with the ability to present to all levels of management and executive leadership
+ Experience working in and leading a 24x7x365 Security operations center
+ Experience managing incident response processes for both large and small scale incidents.
+ Experience with red team and table top exercises
+ Prior experience with vulnerability and compliance management.
+ Experience with penetration testing including scoping, executing and reporting.
+ Excellent teamwork, facilitation, relationship building, and negotiation skills
+ Ability to maintain positive working relationships both leading and as part of a team
+ Must demonstrate effective time management skills and able to multitask effectively
+ Ability to to communicate effectively with both technical and non-technical individuals
Desired
+ Industry Cyber Security certifications (e.g. GIAC, CISSP, etc…)
+ Masters in Business, Engineering, or related fields
+ Experience in Electric or Gas Utility or Power Generation industry
+ Broad knowledge of IT and related control environments
+ Experience with CMMI
Minimum Years of Experience
10 years of experience
Education
Bachelors
Certifications
Disclaimer
Certain positions at the Company may require you to have access to Part 810-Controlled Information. Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.
PSEG is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legally protected characteristic. Legally protected characteristics include race, color, religion, national origin, sex, age, marital status, sexual orientation, disability or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals.
As an employee of PSEG you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations.
For all roles, PSEG’s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. For employees in federally regulated roles (including positions covered by USDOT, PHMSA, or NRC regulations), this also includes random testing. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and/or medically, it is prohibited for employees in federally regulated roles. Employees who are hired or transfer into a federally regulated role are subject to drug and alcohol testing, inclusive of marijuana. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for such a positive result.
PSEG employees must apply for jobs internally through emPower which can be accessed through sharepoint.pseg.com (https://sharepoint.pseg.com/Pages/Home.aspx) by clicking on the emPower icon, then selecting careers. This site (PSEG Careers and Job Openings (https://corporate.pseg.com/careers) ) is strictly for candidates who are not currently PSEG employees, with the exception of PSEG employees who do not have company email addresses.
PSEG is committed to providing reasonable accommodations to individuals with disabilities. If you have a disability and need assistance applying for a position, please call 973-430-3845 or email accommodations@pseg.com.
If you need to request a reasonable accommodation to perform the essential functions of the job, email accommodations@pseg.com . Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.
ADDITIONAL EEO/AA INFORMATION _(Click link below)_
Know your Rights: Workplace Discrimination is Illegal (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRights_10_20.pdf)
Pay Transparency Nondiscrimination Provision
Diversity at PSEG: Equal Opportunity Employer
PSEG is an equal employment opportunity employer and makes employment decisions, including but not limited to, hiring, firing, promotion, demotion, training, and/or compensation, on the basis of merit. Employment decisions are based on an individual’s qualifications as they relate to the job under consideration. PSEG's policy prohibits unlawful discrimination based on sex (which includes pregnancy, childbirth, breastfeeding, or related medical conditions, the actual sex of the individual, or the gender identity or gender expression), race, color, religion, including religious dress practices and religious grooming practices, sexual orientation, national origin, ancestry, citizenship, marital status, familial status, age, physical disability, mental disability, medical condition, genetic information, protected veteran or military status, or any other consideration made unlawful by federal, state or local laws, ordinances, or regulations.
Need to request an accommodation?
If you have a disability and need assistance submitting your resume, applying for a position or registering for a test, please call 973-430-3845. Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.
PSEG is committed to complying with all applicable laws providing equal employment opportunities. This commitment applies to all persons involved in the operations of the Company and prohibits unlawful discrimination by any employee of the Company, including supervisors and co-workers.
PSEG Company: PSEG Long Island
Salary Range : $ 129,000 - $ 211,900
Incentive : PIP 20%
Work Location Category : Remote Local
PSEG operates under a Flexible Work Model where flexible work is offered when job requirements allow. In support of this model, roles have been categorized into one of four work location categories: onsite roles, hybrid roles that are a blend of onsite and remote work, remote local roles that are primarily home-based but require some level of purpose-driven in-person interaction and living within a commutable distance, and remote non-local roles that can be effectively performed remotely with the ability to work in approved states.
We want you to be healthy, balanced, and feel secure. That’s why you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k) with company match, company paid life insurance, tuition reimbursement and a minimum of 18 days of paid time off per year.
PSEG offers a unique experience to our more than 12,000 employees – we provide the resources and opportunities for career development that come with being a Fortune 500 company, as well as the attention, camaraderie and care for one another you might typically associate with a small business. Our focus on combatting climate change through clean energy technology, our new net zero climate vision for 2030 and enhanced commitment to diversity, equity and inclusion; and supporting the communities we serve make this a particularly exciting time to join PSEG.
Job Summary
The leader of Security Operations and Response leads the development, implementation, and ongoing coordination of an enterprise-wide cyber security operations and response program including Security Monitoring, Detection, Sec Ops Tools & Automation, Vulnerability Management, Cyber Threat Monitoring, Incident Response, Cyber Resiliency, Threat Intel, & Cyber Threat Hunting. Coordinates among all lines of business and service departments, as well as external risk organizations (Law Enforcement, E-ISAC, and other cyber industry trade organizations) and peer energy companies, as PSEG’s senior leader responsible for Security Operations and Response which includes enhance security operations and response capabilities (e.g. people, process, & technologies). In addition, this lead is responsible for defining and aligning security policies, strategy, standards and govern day to day security operations which includes oversight of a managed service provider for SOC services as well as maintaining an Incident Response program to ensure that the appropriate responses to various types of cybersecurity incidents. This individual, during a cyber incident may be designated as lead cyber incident commander and responsible for the containment, eradication, and recovery (as applicable) from an incident. The portfolio included in this security pillar includes multiple discrete projects/enhancements per year for security capabilities within this remit. The leader of Security Operations & Cyber Assurance engages across the entire IT, OT, and managed services. This individual is responsible to ensure appropriate maturity of controls within their remit.
Job Responsibilities
+ Direct, coach and counsel Cyber resources (internal and external) on SecOps technology consisting of Security Monitoring, Detection, Sec Ops Tools & Automation, Cyber Threat Monitoring, Incident Response, Cyber Resiliency, Threat Intel, & Cyber Hunting for both IT and OT functions in all facets of Security Operations and Response service delivery. Ensure that the Security Operations service delivery aligns with the corporate strategic Information Technology plan, inclusive of development of security operations standards, capacity planning, lifecycle management plans, solution selection, and partner management. Ensure scalability of Security Operations and Response function & tools for hardware and software to meet cyclical business needs & risk tolerance.
+ Develop and implement best practices for Security Operation and Response for PSEG. Participate in peer group meetings and benchmark Security Operations and Response objectives and tools with leading companies inside and outside the industry. Work with professional security operations and response associations, and consultants as required, to identify best practices
+ Interacts with Product, Technology teams, and various contracted IT resources. Operationalizing threat models to protect against existing and emerging threats.
+ Builds relationships with technology and business teams across the company. Interacts routinely with vendors, service providers, consultants/advisors, law enforcement agencies and professional organizations. Ensure that cyber operations requirements are identified, well defined, properly documented and approved by appropriate stakeholders.
+ Develop and manage SecOps capital and O&M budgets to meet business needs. Provide leadership in the identification of optimal O&M and capital allocations, inclusive of opportunities to reduce expenditures while transforming the way PSEG Security Operations and Response conducts its business. Lead and/or participate in business case development.
+ Evaluate performance, perform career development, coaching and counseling for SecOps staff.
Job Specific Qualifications
Required
+ Bachelors degree and 10 years of relevant cyber security experience
+ In lieu of a degree 14 years of cyber experience
+ Demonstrated Strong leadership and influence skills
+ Demonstrated strong presentation skills with the ability to present to all levels of management and executive leadership
+ Experience working in and leading a 24x7x365 Security operations center
+ Experience managing incident response processes for both large and small scale incidents.
+ Experience with red team and table top exercises
+ Prior experience with vulnerability and compliance management.
+ Experience with penetration testing including scoping, executing and reporting.
+ Excellent teamwork, facilitation, relationship building, and negotiation skills
+ Ability to maintain positive working relationships both leading and as part of a team
+ Must demonstrate effective time management skills and able to multitask effectively
+ Ability to to communicate effectively with both technical and non-technical individuals
Desired
+ Industry Cyber Security certifications (e.g. GIAC, CISSP, etc…)
+ Masters in Business, Engineering, or related fields
+ Experience in Electric or Gas Utility or Power Generation industry
+ Broad knowledge of IT and related control environments
+ Experience with CMMI
Minimum Years of Experience
10 years of experience
Education
Bachelors
Certifications
Disclaimer
Certain positions at the Company may require you to have access to Part 810-Controlled Information. Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.
PSEG is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legally protected characteristic. Legally protected characteristics include race, color, religion, national origin, sex, age, marital status, sexual orientation, disability or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals.
As an employee of PSEG you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations.
For all roles, PSEG’s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. For employees in federally regulated roles (including positions covered by USDOT, PHMSA, or NRC regulations), this also includes random testing. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and/or medically, it is prohibited for employees in federally regulated roles. Employees who are hired or transfer into a federally regulated role are subject to drug and alcohol testing, inclusive of marijuana. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for such a positive result.
PSEG employees must apply for jobs internally through emPower which can be accessed through sharepoint.pseg.com (https://sharepoint.pseg.com/Pages/Home.aspx) by clicking on the emPower icon, then selecting careers. This site (PSEG Careers and Job Openings (https://corporate.pseg.com/careers) ) is strictly for candidates who are not currently PSEG employees, with the exception of PSEG employees who do not have company email addresses.
PSEG is committed to providing reasonable accommodations to individuals with disabilities. If you have a disability and need assistance applying for a position, please call 973-430-3845 or email accommodations@pseg.com.
If you need to request a reasonable accommodation to perform the essential functions of the job, email accommodations@pseg.com . Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.
ADDITIONAL EEO/AA INFORMATION _(Click link below)_
Know your Rights: Workplace Discrimination is Illegal (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRights_10_20.pdf)
Pay Transparency Nondiscrimination Provision
Diversity at PSEG: Equal Opportunity Employer
PSEG is an equal employment opportunity employer and makes employment decisions, including but not limited to, hiring, firing, promotion, demotion, training, and/or compensation, on the basis of merit. Employment decisions are based on an individual’s qualifications as they relate to the job under consideration. PSEG's policy prohibits unlawful discrimination based on sex (which includes pregnancy, childbirth, breastfeeding, or related medical conditions, the actual sex of the individual, or the gender identity or gender expression), race, color, religion, including religious dress practices and religious grooming practices, sexual orientation, national origin, ancestry, citizenship, marital status, familial status, age, physical disability, mental disability, medical condition, genetic information, protected veteran or military status, or any other consideration made unlawful by federal, state or local laws, ordinances, or regulations.
Need to request an accommodation?
If you have a disability and need assistance submitting your resume, applying for a position or registering for a test, please call 973-430-3845. Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.
PSEG is committed to complying with all applicable laws providing equal employment opportunities. This commitment applies to all persons involved in the operations of the Company and prohibits unlawful discrimination by any employee of the Company, including supervisors and co-workers.
Source : PSEG