A Cyber Security Manager or Administrator monitors, controls, and maintains systems that protect the security of large databases, including databases with customer information and patient files. Manages and administers the examination of client computer systems, identification of weak points in security, development and implementation of new systems, and monitoring and response to security issues.
Cybersecurity Manager Job Description Position Overview The Cybersecurity Manager will lead the organization s cybersecurity strategy, ensuring compliance with industry standards, contractual obligations, and regulatory requirements. This role is responsible for managing cybersecurity programs, reviewing customer contracts for security obligations, and driving continuous improvement in organizational cybersecurity posture. The ideal candidate will have deep expertise in
NERC CIP
compliance and hold advanced cybersecurity certifications or degrees. Key Responsibilities Cybersecurity Program Management Develop, implement, and maintain enterprisewide cybersecurity policies, standards, and procedures. Oversee risk assessments and vulnerability management programs. Monitor and report on cybersecurity performance metrics and compliance status. Maintain relationships with relevant product and engineering teams, providing expert advice and guidance on cybersecurity topics. Regulatory & Standards Compliance Ensure adherence and monitoring of processes related to
NERC CIP
standards and other applicable regulations as required by customer contracts. Prepare for and lead internal and external audits related to cybersecurity compliance. Maintain documentation and evidence for compliance reporting. Manage the organization s ISO 27001 and SOC2 certifications, including ownership of the audit processes, non-conformance follow ups, and policy updates to ensure compliance. Customer Contract Review Review and interpret cybersecurity requirements in customer contracts. Collaborate with legal and commercial teams to ensure contractual obligations are met. Incident Response & Risk Management Develop and maintain incident response plans. Lead investigations and remediation efforts for security incidents. Conduct root cause analysis and implement preventive measures. Training & Awareness Design and deliver cybersecurity awareness programs for employees. Design and execute tabletop exercises to test policies and procedures. Provide specialized training for teams handling critical infrastructure. Continuous Improvement Identify emerging threats and recommend proactive security measures. Evaluate and implement new technologies and leading practices to strengthen security posture. Collaboration & Leadership Work closely with IT, Operations, Product, Engineering, Legal and Compliance teams to align cybersecurity initiatives with business objectives. Manage relationships with external vendors and service providers. Time & Travel Expectations This role is open to any qualified applicant within the United States. Depending on their physical location, candidates should expect to participate in video conference calls that originate in different time zones, including those with HQ in Seoul, South Korea. Anticipate travel up to 10%. Qualifications Education & Certifications Bachelor s degree in Cybersecurity, Information Technology, or related field (Master s preferred). Advanced cybersecurity certification such as CISSP, CISM, or equivalent. Experience Minimum 7+ years in cybersecurity roles, with at least 3 years in a managerial capacity. Proven experience with
NERC CIP
compliance in the energy sector. Strong understanding of risk management frameworks (e.g., NIST, ISO 27001, SOC2). Skills Excellent leadership and communication skills. Ability to manage multiple priorities in a fast-paced environment. Strong analytical and problem-solving abilities. Preferred Attributes Experience in battery energy storage or renewable energy industry. Familiarity with OT/ICS security and critical infrastructure protection
