Director of Cybersecurity

This Opportunity We are seeking an experienced Director of Cybersecurity to lead the planning, design, implementation, and assurance of cybersecurity programs across major infrastructure, transportation, energy, utilities, aviation, and public sector projects. This is a hand on/seller-doer role. Unlike traditional corporate IT security roles, this position is embedded directly within project delivery teams, partnering with clients, engineers, program managers, technology specialists, and executive stakeholders to ensure cybersecurity requirements are designed, implemented, validated, and maintained throughout the project lifecycle.The successful candidate will serve as a technical leader, trusted advisor, and project delivery professional, providing cybersecurity expertise for digital transformation initiatives, operational technology (OT) environments, cloud implementations, Project Management Information Systems (PMIS), critical infrastructure programs, and enterprise technology deployments.This role combines technical cybersecurity expertise, client engagement, project management, regulatory compliance, risk management, and strategic advisory services.Your Impact Project Cybersecurity LeadershipLead cybersecurity planning and execution for major infrastructure, transportation, utility, energy, aviation, water, and public sector programs.Develop project-specific cybersecurity strategies, architectures, roadmaps, and implementation plans.Integrate cybersecurity requirements into project delivery processes, procurement packages, technical specifications, and solution designs.Collaborate with multidisciplinary engineering, program management, and technology delivery teams.Serve as the primary cybersecurity advisor for project executives, program managers, and client stakeholders.Support project pursuits, proposals, presentations, and client interviews.Security Governance, Risk, and ComplianceConduct cybersecurity risk assessments and maturity evaluations.Develop and maintain security policies, standards, procedures, and governance frameworks.Lead compliance initiatives supporting federal, state, and industry requirements.Perform gap assessments and remediation planning against established cybersecurity frameworks.Support audits and independent security assessments.Develop Plans of Action and Milestones (POA&M) and track remediation activities.Security Architecture and Technical AssuranceReview and approve cybersecurity architecture for cloud, enterprise, operational technology, and PMIS environments.Evaluate technology platforms, integrations, and vendor solutions from a cybersecurity perspective.Define identity management, access control, network segmentation, encryption, monitoring, and incident response requirements.Support secure system design reviews and cybersecurity validation activities.Guide implementation of security controls across project technology ecosystems.Critical Infrastructure and Operational Technology SecuritySupport cybersecurity initiatives involving:Industrial Control Systems (ICS)SCADA environmentsOperational Technology (OT)Intelligent Transportation Systems (ITS)Connected and Autonomous Vehicle infrastructureUtility control systemsAirport and transit technologiesLead cybersecurity assessments of critical infrastructure environments.Develop security strategies that balance operational reliability and cyber resilience.Incident Response and Security ResilienceDevelop and maintain incident response plans and recovery procedures.Support cybersecurity incident investigations and response activities.Conduct tabletop exercises, simulations, and security preparedness reviews.Develop business continuity and disaster recovery recommendations.Business Development and Client EngagementIdentify cybersecurity opportunities across infrastructure markets.Support strategic pursuits and proposal development activities.Participate in conference presentations, thought leadership initiatives, and client workshops.Build trusted relationships with executive leadership and client stakeholders.Team LeadershipMentor cybersecurity professionals, project managers, and technical staff.Support recruiting, workforce development, and technical training initiatives.Foster a culture of cybersecurity awareness and continuous improvement.Provide technical quality reviews and subject matter expertise across project portfolios.Who You Are Minimum Requirements:Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Systems, or related discipline, or equivalent. Master's degree preferred.15+ years of cybersecurity experience.5+ years leading cybersecurity programs, projects, or consulting engagements.Demonstrated experience supporting infrastructure, transportation, aviation, utility, energy, water, or government projects.Experience serving in client-facing consulting or advisory roles.Proven ability to lead multidisciplinary project teams.Technical Expertise:Experience with several of the following:FISMANIST Cybersecurity Framework (CSF)NIST 800-53NIST 800-171FedRAMPISO 27001CIS Critical Security ControlsNERC-CIPPCI-DSSHIPAA/HITRUSTZero Trust ArchitectureCloud Security (Azure, AWS, Google Cloud)OT/ICS SecurityVulnerability ManagementSecurity Operations and MonitoringIdentity and Access ManagementSecurity Architecture ReviewsRisk Management and Compliance ProgramsPreferred Experience:Candidates with experience supporting one or more of the following will be strongly preferred:Utility transmission and distribution programsEnergy generation facilitiesAirport technology systemsRail and transit programsIntelligent transportation systemsMajor capital project delivery organizationsPMIS and construction technology platformsSmart infrastructure and connected mobility initiativesCloud-hosted enterprise applications supporting public agenciesCertifications:One or more of the following certifications is highly desirable:CISSPCISMCGRC (formerly CAP)CCSPCRISCGIAC CertificationsSecurity+ISO 27001 Lead AuditorCertified Ethical Hacker (CEH)Why Join Us?You will help secure some of the nation's most important infrastructure programs while working directly with project delivery teams, owners, engineers, and technology professionals. This role offers the opportunity to influence large-scale digital transformation initiatives, critical infrastructure modernization efforts, and emerging smart infrastructure programs while shaping cybersecurity strategy from project conception through operation.#LI-MP1About WSPWSP USA is the U.S. operating company of WSP, one of the world's leading engineering and professional services firms. Dedicated to serving local communities, we are engineers, planners, technical experts, strategic advisors and construction management professionals. WSP USA designs lasting solutions in the buildings, transportation, energy, water and environment markets. With more than 15,000 employees in over 300 offices across the U.S., we partner with our clients to help communities prosper.WSP provides a flexible and agile workplace model while meeting client needs. Employees are also afforded a comprehensive suite of benefits including medical, dental, vision, disability, life, and retirement savings focused on providing health and financial stability throughout the employee’s career.At WSP, we want to give our employees the challenges they seek to grow their careers and knowledge base. Your daily contributions to your team will be essential in meeting client objectives, goals and challenges. Are you ready to get started?WSP USA (and all of its U.S. companies) is an Equal Opportunity Employer Race/Age/Color/Religion/Sex/Sexual Orientation/Gender Identity/National Origin/Disability or Protected Veteran Status.The selected candidate must be authorized to work in the United States.NOTICE TO THIRD PARTY AGENCIES:WSP does not accept unsolicited resumes from recruiters, employment agencies, or other staffing services. Unsolicited resumes include any resume or hiring document sent to WSP in the absence of a signed Service Agreement where WSP has expressly requested recruitment/staffing services specific to the position at hand. Any unsolicited resumes, including those submitted to hiring managers or other business leaders, will become the property of WSP and WSP will have the right to hire that candidate without reservation – no fee or other compensation will be owed or paid to the recruiter, employment agency, or other staffing service. Full timePosting Date: 2026-09-15