Senior Manager, Cybersecurity

The Senior Manager Cybersecurity owns Apexs cybersecurity program across corporate IT cloud and operational technology environments reporting to the Director of Integrated Technology Solutions (ITS).

This is a senior individual-contributor role with no direct reports and real authority. Youll set security standards review significant technology changes direct security work carried out by ITS engineers and operations staff and lead the response when incidents occur. You can enforce security standards and take immediate protective action against an active threat while business leaders own decisions to accept material residual risk.

This role leads Apexs cybersecurity program at a point where the direction is set and the foundations are in place. The work now is to mature it: turning strategy into durable standards sharper risk decisions and a program that keeps pace as the business and the threat landscape change. Youll have broad scope direct access to leadership and a real hand in protecting infrastructure that supports the energy transition.

The role is supported by ITS infrastructure systems engineering and operations teams and by a 24/7 managed security partner that provides monitoring and initial response. Youll be the senior escalation point when incidents occur including after hours.

• Hours: Full-time
• Type: Exempt
• Department: Integrated Technology Solutions
• Travel: 10% 
• Office Location: Charlottesville VA

Primary Responsibilities: 

Strategy & Risk

• Lead and evolve Apexs cybersecurity strategy roadmap policies and standards in partnership with the Director of ITS
• Run the cybersecurity risk program including the risk register assessments of systems vendors and integrations and security review of significant technology initiatives before implementation
• Report security posture material risk and program performance to leadership

Security Operations

• Oversee vulnerability management endpoint protection SIEM/SOC monitoring network and firewall governance and cloud security posture
• Own identity and access standards including IAM PAM and account lifecycle
• Manage relationships with managed security SOC and incident response partners including performance and escalation
• Direct ITS technical staff on security work while staying hands-on enough to investigate threats and validate controls yourself

OT & NERC CIP

• Define cybersecurity requirements for the IT/OT boundary including remote and vendor access in partnership with SCADA/OT leadership
• Integrate NERC CIP cybersecurity requirements into Apexs overall security framework
• Work with SCADA/OT leadership to extend incident response monitoring vulnerability management and vendor risk programs to OT including protection of critical backups

Incident Response & Resilience

• Serve as incident commander for cybersecurity events coordinating with Legal Communications leadership insurers forensics partners regulators and law enforcement
• Maintain incident response plans and playbooks and run regular tabletop exercises including joint exercises with SCADA/OT
• Own IT disaster recovery and cyber recovery planning and testing and coordinate enterprise business continuity

Enabling the Business

• Set security requirements for AI SaaS APIs automation data handling and secrets management so teams can adopt new technology responsibly
• Lead security awareness phishing simulation and privileged-user training and build security capability across ITS

Qualifications :

To succeed as the Senior Manager Cybersecurity at Apex Clean Energy youll need to excel within the following criteria:

Required Qualifications

• 8 years of progressively responsible experience in cybersecurity including leading security programs or major initiatives across teams without direct reporting authority
• A track record of maturing an established security program through standards risk management and technical controls
• Hands-on experience with SIEM EDR firewalls vulnerability management IAM/PAM and cloud security tooling including personally investigating incidents
• Experience leading incident response and making time-sensitive decisions during active events
• Ability to separate technical findings from material business risk and explain the difference to senior leadership
• Sound judgment balancing security operations business priorities and regulatory obligations

Preferred Qualifications

• CISSP CISM GICSP GIAC or comparable certification
• Working knowledge of NERC CIP as it applies to generation assets
• Experience in energy utilities or other critical infrastructure including OT ICS or SCADA environments (IEC 62443 and NIST SP 800-82 familiarity a plus)
• Experience managing MSSPs SOC providers or incident response firms
• Experience assessing security risk in AI SaaS and automation adoption

At Apex Clean Energy we believe that diverse perspectives drive innovation and success. We are committed to creating an inclusive environment where all individuals feel valued and empowered. We encourage applicants from all backgrounds to apply even if you do not meet every qualification listed in the job description. Your unique experiences and skills could be the perfect fit for our team!

If you are passionate about renewable energy and want to join us in accelerating the shift to clean energy we would love to hear from you. Please submit your application for our teams review!

Additional Information :

Work Environment:

Works in both an indoor office environment and an outdoor environment occasionally at night which may be subject to inclement weather. Extended hours may be required to complete scheduled repairs.

How Youll Grow

At Apex Clean Energy our professional development plans focus on helping people at every level of their career to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders we believe theres always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the dynamic fast-paced renewable energy industry. From on-the-job learning experiences to a robust multi-week onboarding experience to formal development programs our professionals have a variety of opportunities to continue to grow throughout their career.

What Apex Can Offer You

At Apex Clean Energy we know that great people make a great company. We value our people and offer employees a broad best-in-class range of benefits.

• A mission-driven energetic environment that supports and encourages our people to do their best work every day.
• A respect for and celebration of individuality differences and uniqueness
• Collaborative and driven professional workforce committed to supporting your ideas and feedback and accelerating your potential
• Ongoing support and guidance such as on-the-job learning hands-on experience and mentorship
• Training strategies and tools to support your personal and professional growth
• Team atmosphere of diverse professionals committed to making an impact as an organization
• Opportunities to volunteer and give back to our local communities
• Exceptional benefits such as medical and dental; 401(k) with corporate match
• Base and bonus commensurate with experience
• Responsible Paid Time Off plus standard company holidays
• Benefits Offered: comprehensive high-deductible health plans dental and vision insurance plans short-term and long-term disability group life insurance 401(k) corporate matching flexible spending arrangements company paid parking and cell phone fitness and wellness corporate discounts

Apex Clean Energy Inc.  is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race color religion sex sexual orientation gender identity age national origin ancestry citizenship disability or veteran status.

Remote Work :

No

Employment Type :

Full-time