Cyber Security Manager

Job Description

The Cybersecurity Manager leads the charge in protecting our digital infrastructure, sensitive data, and critical operational systems. This role combines strategic leadership with hands-on technical expertise. You'll be responsible for shaping security policies, managing threat response, and ensuring compliance, all while staying ahead of an ever-changing threat landscape. Cyber threats don’t stop at the corporate LAN. Our work spans IT, OT, and SCADA systems powering critical infrastructure, which means the stakes are high, the work is meaningful, and your expertise will have real impact.

If you're the type of person who reads breach reports for fun, speaks fluent NIST, and sleeps better knowing MFA is everywhere, we want to talk.

Hours/Type:  Full Time, Exempt

Department:  Integrated Technology Solutions

Travel:  10%

Qualifications

Primary Responsibilities

• Leadership & Strategy
  • Develop, maintain, and execute a comprehensive cybersecurity roadmap
  • Serve as subject matter expert for all things security — advising IT, OT, SCADA, and business leadership
  • Lead incident response planning, execution, and post-mortem analysis
  • Own and refine internal security policies, controls, and compliance frameworks (NIST, CIS, SOC2, etc.)
• Operational Security
  • Oversee vulnerability management, endpoint protection, SIEM/SOC monitoring, firewall rule hygiene, and secure access controls
  • Manage vendor risk assessments, third-party integrations, and cloud security posture (Azure, etc.)
  • Ensure effective identity & access management (IAM) and privileged access management (PAM) practices
  • Lead security awareness training and simulations across the organization
• Compliance & Governance
  • Be an internal subject matter expert on NERC CIP requirements and processes
  • Ensure security programs support regulatory and industry compliance (e.g., NERC CIP, NIST CSF, ISO 27001)
  • Manage audits, assessments, and risk reports for internal and external stakeholders
  • Own Business Continuity & Disaster Recovery (BC/DR) planning related to cyber threats
• Collaboration
  • Partner with IT, OT, SCADA, and operations teams to ensure secure architecture and workflows
  • Act as the primary liaison between technical teams and senior leadership during security incidents
  • Mentor staff and foster a culture of proactive security awareness

To succeed as the Cybersecurity Manager at Apex Clean Energy, you’ll need to excel within the following criteria:

• Required Qualifications:
  • 6+ years in cybersecurity roles, including at least 2 years in a leadership/management capacity
  • Deep understanding of network security, threat intelligence, vulnerability assessment, and incident response
  • Hands-on experience with SIEM, EDR, firewall, and cloud security tools
  • Strong knowledge of risk frameworks: NIST CSF, CIS Controls, ISO 27001, etc.
  • Excellent communication and stakeholder engagement skills

• Preferred Qualifications:
  • Certifications such as CISSP, CISM, GIAC, or similar
  • Experience in energy, utilities, or critical infrastructure sectors
  • Familiarity with IT/OT convergence and securing industrial control systems
  • Background in managing compliance efforts (SOC2, NERC CIP, etc.)

At Apex Clean Energy, we believe that diverse perspectives drive innovation and success. We are committed to creating an inclusive environment where all individuals feel valued and empowered. We encourage applicants from all backgrounds to apply, even if you do not meet every qualification listed in the job description. Your unique experiences and skills could be the perfect fit for our team!

If you are passionate about renewable energy and want to join us in accelerating the shift to clean energy, we would love to hear from you. Please submit your application for our team’s review!