Security Manager

Colonial has provided a wide range of opportunities for job candidates who are highly qualified, skilled, motivated and team players. Employees find exciting opportunities to grow and develop their careers at a stable company which offers a generous compensation and benefits package that includes annual incentive bonuses, retirement plans, insurance coverage and a host of other features that support a happy, active, productive and rewarding life. Come to Colonial, a great place to work, where people matter most, and where safety 24/7 is paramount.Ready to work for Colonial Pipeline Company?Are you intrigued by the thought of being part of revolutionizing the energy industry and a new era in the pipeline industry? Do you want to be a part of a company that is obsessed with excellence in everything we do? A company growing and expanding our business that is full of opportunity? If so, we are seeking smart, safety focused, and energetic professionals to join our team to help us to the next level of excellence!What is it that we do at Colonial Pipeline Company?Colonial Pipeline is the largest refined products pipeline in the United States, transporting more than 100 million gallons or 2.5 million barrels per day. Colonial transports various grades of gasoline, diesel fuel, home heating oil, jet fuel, and fuels for the U.S. military through a pipeline system. Colonial transports approximately 45 percent of all fuel consumed on the East Coast, providing refined products to more than 50 million Americans.Manager, Security PlatformsSecurity Office - Security Platforms | Alpharetta | Typical weekday schedule | Approximately 5% travelPosition Type: ExemptLeadership: People ManagerEnvironment: IT, OT and ICSAbout the Manager Security Platforms PositionThe Manager, Security Platforms leads the engineering, administration, operational support, and lifecycle management of Colonial Pipeline's enterprise cybersecurity platforms. This role executes platform strategy, architecture direction, and governance standards established by security leadership while guiding a team of security engineers responsible for secure, reliable, scalable, and compliant technologies across Information Technology (IT) and Operational Technology (OT) environments, including Industrial Control Systems (ICS) supporting critical infrastructure.You will support platform roadmaps, technology budgets and renewals, audit and regulatory requirements, vendor relationships, and cross-functional partnerships. The portfolio includes endpoint security, privileged access management, identity and access management, threat detection and response, SIEM and log management, internet and email security, DDoS protection, vulnerability management, and related security technologies.The Manager, Security Platforms can be a successor to the CISO.What You Get to DoLead the design, implementation, configuration, administration, maintenance, and support of enterprise security platforms across IT and OT/ICS environments.Oversee platform lifecycle activities, including upgrades, patching, migrations, modernization, technical debt reduction, resiliency, disaster recovery, and business continuity.Direct troubleshooting, root cause analysis, and remediation, and establish operational metrics, service-level objectives, monitoring processes, and support procedures.Oversee software supply chain and artifact security tooling and support secrets management and credential provisioning integrations for CI/CD and build pipelines.Support platform standards, reference architectures, architecture reviews, proof-of-concept evaluations, technology assessments, and investment recommendations established by security leadership.Lead remediation for audit findings, management action plans, and security control deficiencies while supporting SOX, TSA Security Directives, internal controls, and other regulatory requirements.Manage, develop, coach, and mentor Security Platform Engineers and assigned personnel, including goal setting, development planning, staffing, hiring, onboarding, training, and certification needs.Manage security platform initiatives from planning through implementation and operational transition, including charters, implementation plans, resource forecasts, sprint planning, backlog prioritization, and status reporting.Administer assigned budgets and forecasts and manage licensing, renewals, support agreements, purchase orders, statements of work, vendor health checks, and roadmap reviews.Communicate platform performance, project status, risks, and resource needs while building strong relationships across Security Operations, Infrastructure, Application Support, Physical Security, Internal Audit, Procurement, Legal, and the business.Consistently demonstrate Colonial Pipeline core values of Respect, Accountability, Innovation, Safety, and Excellence, and support emergency response efforts when assigned.What You Bring to the TableBachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, Business Administration, or a related field of study. A combination of experience and education will be considered5+ years of progressive experience in information technology, cybersecurity, security engineering, or a related discipline.3+ years of technical leadership, team leadership, or people management experience.Experience administering enterprise security technologies and supporting cybersecurity programs.Experience supporting security audits, regulatory requirements, and risk management initiatives.Experience supporting technology projects, budgets, vendor relationships, and procurement activities.Experience supporting Industrial Control Systems (ICS) or Operational Technology (OT) within a critical infrastructure environment.Knowledge of cybersecurity principles, security architecture, defense-in-depth strategies, security controls, and enterprise security platforms.Understanding of regulatory frameworks and industry standards, including NIST, TSA Security Directives, SOX, CIS Controls, and ISO 27001.Ability to translate complex technical concepts for technical and non-technical audiences, make sound operational decisions, manage competing priorities, and collaborate across functions.Skills That Set You ApartMaster's degree in Cyber Security, Information Technology, Business Administration, Engineering, or a related discipline.7+ years of experience supporting or leading cybersecurity engineering or security platform teams.Experience within critical infrastructure, utility, energy, or another highly regulated industry.Experience with endpoint security, SIEM, cloud security, identity security, network security, and security monitoring platforms.Experience with OT/ICS security tooling, PKI/certificate management, software supply chain security platforms, cybersecurity transformation, or modernization initiatives.Experience with critical infrastructure regulatory frameworks, such as TSA Security Directives, as they apply to IT and OT security tooling.CISSP, CISM, CISA, CRISC, GIAC, or vendor certifications relevant to supported security technologies.Advantages of Working at Colonial Pipeline CompanyGetting to work for a company that helps to meet our country's energy needs and keeps us moving!Team members who care about each other while accomplishing remarkable things.Highly competitive benefits - Check out Colonial's Total Rewards.Are you up to the challenge? What are you waiting for? Apply today!Colonial Pipeline is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race, color, religion, sex, national origin, age, disability, sexual orientation, veteran status or any other reason prohibited by federal, state or local law.Statement to all Third-Party Agencies and Similar Organizations:Colonial Pipeline accepts resumes only from agencies with which we formally engage their services. Please do not forward resumes to our applicant tracking system, Colonial Pipeline employees, hiring managers, or send to any Colonial Pipeline facility. Colonial Pipeline is not responsible for any fees or charges associated with unsolicited resumes. #J-18808-Ljbffr