Security Program Senior Manager

Description:

At the American Public Power Association (APPA), we serve as the voice of not-for-profit, community-owned utilities that power 2,000 towns and cities nationwide. We represent public power before the federal government to protect the interests of the more than 54 million people that public power utilities serve, and the 96,000 people they employ. We advocate and advise on electricity policy, technology, trends, training, and operations. Help us continue to achieve our mission for our members and the communities they serve!

At APPA, we strive to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and feels valued.

We have an exciting opportunity for a Security Program Senior Manager who will be responsible for leading a wide variety of APPAs physical and cyber security programmatic efforts, both new and existing. This individual interfaces with federal agencies and member utilities to ensure member needs and positions are well represented. The successful candidate will have a mix of physical and cyber security knowledge, energy sector experience, trade association experience, excellent program management skills, highly skilled in writing for varying audiences, and be proactive, attentive, and drive added value.

This is a hybrid position which requires the incumbent to reside in the Washington, DC metropolitan area and come into the office a minimum of two to three days each week (with Tuesdays being a mandatory day).

• Represent APPA on physical and cyber security issues before member organizations, state/federal entities, trade/industry/vendor organizations, and the public.
• Administer an APPA cybersecurity designation program designed to improve the cybersecurity posture and maturity of members. Includes leading the member review panel, executing revisions of the supporting documents, marketing the program, growing enrollment year over year, and developing metrics and assessing overall program performance.
• Serve as an APPA supporting representative on a CEO-led coalition between energy sector and U.S. Government. Handle all logistical preparations for 2-3 annual meetings, e.g., scheduling meetings, drafting agendas and statements of conclusion, preparing read ahead memos and materials, updating metrics. Will drive programmatic strategy, through development of action plans, after action reports, and other coalition and coalition-related work products.
• Develop and execute an APPA training program for cyber and physical security. This will include both in-person training courses that are replicable, along with one-time and on demand virtual trainings. Responsible for developing content, execution of trainings, and driving/increasing member participation.
• Lead APPA supply chain efforts, including leading working group efforts on the subject, producing reports and studies, and serving as principal point of contact for members and stakeholder organizations.
• Serve as lead for an APPA member cybersecurity community, responsible for scheduling monthly meetings, arranging guest speakers, preparing meeting materials, and increasing membership and engagement.
• Develop member engagement outreach strategy for security team and senior APPA leadership. Will include identifying opportunities, drafting abstracts for submission, and presenting at member and stakeholder events to showcase and highlight APPA and its security offerings.
• Development and creation of security team communications materials, including talking points, PowerPoints, articles, podcasts, and other collateral materials to enhance APPA security messaging. Responsible for collaborating with APPA Communications Department to update and maintain physical and cyber security webpages and resources.
• Create and track metrics for security engagement with members and coordinate with security team members to collect data and update APPAs CMS.
• Assist with planning and execution of annual APPA Cybersecurity and Technology Summit, along with various physical and cyber security related sessions at additional APPA conferences.
• Review, process, and produce information from security threat feeds to distribute relevant alerts to APPA members.
• Able to serve as a principal investigator for current or future federal funding agreements, serving as the overall program manager, including contracts and project budgets, overseeing all aspects of programmatic design and execution from beginning to end.
• Support efforts related to identifying and coordinating production and writing of funding opportunities and grant applications, as well as cooperative agreement management documents.
• Research and respond to member inquiries.

• Degree from a 4-year college or university, with coursework in physical or cyber security, energy systems, engineering, risk management, or related discipline.
• 10+ years prior experience at an electric utility, energy sector association, or U.S. Federal Government agency related to energy/risk/infrastructure.
• 7-10+ years experience collaborating/coordinating/liaising with federal departments and agencies.
• 7-10+ years working in a membership/trade organization and/or with a wide array of stakeholder communities, preferably in the energy sector.
• 7-10+ years of security project management and related experience
• 7-10+ years in leadership positions.
• 5-7+ years experience developing and leading training programs.
• Familiarity with government and industry security standards and frameworks, e.g., NERC CIP, CISA CPGs, NIST CSF.
• Excellent project management skills and ability to drive performance from all areas within the department.
• Ability to establish and maintain good working relationships with personnel of member utilities, federal agencies, utility interest groups, and other professional organizations.
• Ability to undertake and complete projects in area of expertise with minimal supervision in a team environment.
• Ability to express ideas clearly, both orally and in writing, including ability to communicate technical and complex issues to non-technical audiences.
• Experience with security evaluation, assessment, training, and exercise programs.
• Knowledge of all Microsoft Office applications and Asana or other project management software.
• Proactive self-starter with excellent initiative and attention to detail.
• Ability to obtain and hold top secret level security clearance.
• Prolonged periods of sitting at a desk and working on a computer.
• Prolonged periods of standing and extensive walking during conferences and meetings.
• Must be able to lift up to 20 lbs.
• Travels out of town up to 25% of the year to support APPA, member, and industry stakeholders conferences, events, and meetings.
• Project Management Professional (PMP) certification preferred.
• ASIS Physical Security Professional, CDSE Physical Security Certification, ASIS Certified Protection Professional/Associate Protection Professional or similar physical security certifications preferred.
• Global Industrial Cyber Security Professional (GICSP), GIAC Critical Infrastructure Protection (GCIP), GIAC Response and Industrial Defense (GRID), (ISC)2 Certified Information Systems Security Professional (CISSP), Certified Operational Technology Cybersecurity Professional (TV) or similar cyber security certifications preferred.

In addition to a highly competitive salary and bonus program, APPA offers a robust benefits package to include a comprehensive health and wellness package, 20 days of PTO accrued in the first year, 401(k) match and additional contributions, and more!

APPA is committed to fostering an environment of diversity, equity and inclusion. This commitment pertains to our internal policies and staff expectations, but also extends out to the wider public power community. As part of our strategic plan, we aim to assist members in meeting workforce challengesincluding attracting and retaining a diverse, equitable, and inclusive workplace culturethrough offering educational programs, developing resources, and serving as a platform for the public power community to exchange ideas and best practices.

PI6c0411b634b7-26289-40610542