Head of Security

Client:

Our client is a rapidly growing developer, owner, and operator of advanced energy and critical infrastructure assets. Their mission is to deliver innovative infrastructure solutions that support increasing demand for reliable, resilient, and sustainable power while maintaining the highest standards of safety, security, and operational excellence.

As the company continues to scale, they are seeking a Head of Security to lead and mature the organization's enterprise security program. Reporting directly to the CEO, this executive will oversee all aspects of physical security, cybersecurity, operational technology security, regulatory compliance, threat management, investigations, and business continuity, while serving as a key partner to leadership across operations, engineering, technology, legal, and project development.

Key Responsibilities:

Security Strategy & Leadership

• Develop and execute a comprehensive enterprise security strategy aligned with the organization's growth objectives, risk profile, and regulatory obligations.
• Establish security governance frameworks, policies, procedures, and standards across all corporate offices, project sites, and operational facilities.
• Serve as a trusted advisor to executive leadership on security risks, emerging threats, regulatory developments, and business continuity considerations.
• Build and lead a high-performing security organization while fostering a culture of accountability, awareness, and proactive risk management throughout the company.

Physical Security

• Design and oversee physical security programs for offices, development projects, construction sites, operational facilities, and other critical assets.
• Develop security standards related to site access control, perimeter protection, visitor management, surveillance systems, intrusion detection, and emergency response.
• Conduct security assessments and vulnerability reviews to identify and mitigate physical threats.
• Coordinate security operations across multiple locations while ensuring consistent implementation of corporate standards.

Cybersecurity & Operational Technology Security

• Partner with information technology and engineering teams to protect corporate networks, cloud environments, operational technology systems, and industrial control infrastructure.
• Oversee cybersecurity governance, incident response planning, vulnerability management, and third-party security assessments.
• Develop security controls and risk mitigation strategies for operational technology (OT), industrial control systems (ICS), SCADA environments, and other mission-critical infrastructure.
• Support the integration of cybersecurity requirements into facility design, project development, and operational planning.

Regulatory Compliance & Risk Management

• Lead development and implementation of site security plans and related compliance programs.
• Ensure compliance with applicable federal, state, local, and international security requirements, regulations, and industry standards.
• Serve as the primary point of contact for security-related audits, inspections, assessments, and regulatory engagements.
• Monitor the evolving regulatory landscape and proactively adapt security programs to maintain compliance and operational readiness.

Crisis Management & Incident Response

• Establish and maintain enterprise-wide incident response, crisis management, and business continuity programs.
• Lead investigations involving security incidents, policy violations, and emerging threats.
• Coordinate with internal stakeholders, external agencies, emergency responders, and law enforcement when necessary.
• Oversee security reporting, threat intelligence monitoring, and risk communication to executive leadership.

Vendor & Stakeholder Management

• Select, manage, and evaluate security consultants, contractors, and service providers.
• Ensure third-party security partners meet performance expectations, contractual requirements, and compliance standards.
• Collaborate closely with engineering, operations, legal, compliance, development, and project management teams to embed security considerations throughout the project lifecycle.

Qualifications:

• Bachelor's degree in Engineering, Computer Science, Information Security, Criminal Justice, Business Administration, or a related discipline; advanced degree preferred.
• 10+ years of progressive experience in security leadership, cybersecurity, physical security, risk management, or related disciplines.
• Minimum of 5 years leading enterprise security programs within highly regulated industries.
• Experience supporting critical infrastructure, energy, utilities, industrial facilities, defense, aerospace, transportation, manufacturing, or similar environments strongly preferred.
• Demonstrated success building and scaling security programs in a rapidly growing organization.
• Strong knowledge of physical security systems, cybersecurity frameworks, operational technology security, industrial control systems, and enterprise risk management.
• Experience interacting with regulators, government agencies, auditors, executive leadership teams, and external stakeholders.
• Proven ability to lead cross-functional initiatives and influence decision-making across multiple business functions.
• Exceptional communication, leadership, and organizational skills.
• Ability to operate effectively in a dynamic, entrepreneurial, and fast-paced environment.

Preferred Qualifications

• Advanced degree in a relevant technical, business, or security-related discipline.
• Professional certifications such as CISSP, CPP, CISM, PSP, PMP, or equivalent.
• Experience supporting large-scale infrastructure development, energy projects, industrial operations, or mission-critical facilities.
• Familiarity with security requirements associated with highly regulated operational environments.
• Background managing both corporate security and operational/industrial security programs.

Why Join:

This is a unique opportunity to build and lead the security function for a rapidly scaling infrastructure company at a pivotal stage of growth. The successful candidate will have significant executive visibility, direct influence on company strategy, and the opportunity to shape security programs that support critical assets, advanced technologies, and long-term operational success.