Manager, Cybersecurity

Requisition ID# 164228

Job Category: Information Technology

Job Level: Manager/Principal

Business Unit: Information Technology

Work Type: Hybrid

Job Location: Concord

Department Summary

The Security Intelligence and Operations Center (SIOC) is responsible for ensuring that PG&E proactively identifies and assesses threats to its user and operational network and data, monitors its network for malicious activity, investigates intrusions and other relevant events, and has a sophisticated and detailed understanding of the evolving threat landscape.

Position Summary

This position is for a motivated individual with experience leading Cyber Threat Intelligence (CTI) functions. You will lead a team of Cyber Threat Intelligence analysts within the Security Intelligence and Operations Center (SIOC).

You will oversee and ensure the successful execution of the CTI function. This includes the monitoring of sources, ingestion and management of technical Indicators of Compromise (IOCs), building and leading threat hunt activities, and overseeing complex investigations. You will ensure the production and delivery of relevant intelligence products for cybersecurity stakeholders including daily or ad-hoc threat briefings, vulnerability and exploit analysis, threat assessments, international travel requests, threat hunting, and digital risk monitoring. You will collaborate with internal and external cybersecurity stakeholders and other functional area partners while ensuring the safety and security of the enterprise.

The role is hybrid working from your remote office and in-person at the SIOC in Concord 3x weekly (Tuesday through Thursday) or more based on business needs.

PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the job posting. This compensation range is specific to the locality of the job. The actual salary paid to an individual will be based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, market value, geographic location, and internal equity. Although we estimate the successful candidate hired into this role will be placed between the entry point and the middle of the range, the decision will be made on a case-by-case basis related to these factors.

This job is also eligible to participate in PG&E's discretionary incentive compensation programs.

A reasonable salary range is:

Bay Area Minimum: $151,000.00
Bay Area Maximum: $257,000.00

Job Responsibilities

• Develops and implements work plans in support of department goals.
• Develops metrics and benchmarks for department with a focus on continuous improvement.
• Reports organizational activities and plans to senior leadership.
• Manages experience cybersecurity coworkers and dynamic workflows based on business needs and security priorities.
• Provides peer review and support for all inputs and outputs of the organizational deliverables.
• Maintains expertise in the areas of technology, regulations, and threats to ensure PG&E's direction is appropriately aligned to target risk thresholds.
• Manages employees, contractors and vendors for the efficient delivery of services.
• Collaboratively forges cross-functional relationships and partners with peers and customers for effective outcomes.
• Leads efforts in creative approaches to problem solving and quality deliverables supporting business needs
• Accountable for negotiating conflicts and ensuring identified issues are resolved
• Establishes comprehensive service level agreements
• Ensures staff has the resources and skills needed to support all related work
• Acts as a liaison and conduit for information flow between the department team and the rest of the Cybersecurity, IT, business and appropriate external stakeholders
• Continuous monitoring of emerging tools and technologies to assure the most appropriate technology is being proposed, deployed, and used.
• Establishes continuous improvement programs and demonstrates high levels of engagement with the business and the Cybersecurity organization.
• Responsible for managing performance, developing, and coaching direct reports.

Qualifications

Minimum:

• Bachelor's degree in computer science, Cybersecurity, or similar field; or equivalent experience

• 6 years of combined IT, critical infrastructure, intelligence, and/or cyber/information security work experience
• 3 year of supervisory experience
• Minimum of at least one information security certification such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Ethical Hacker (CEH), or equivalent required.

Desired:

• Experience in a Cyber Threat Intelligence function at a large enterprise
• Demonstrated experience or expertise in intelligence-driven threat hunting in a complex enterprise environment
• Experience with industry Information Sharing and Analysis Centers (ISACs)
• Knowledge of networking, cloud computing, and artificial intelligence (AI)
• Knowledge of Information Security management policies, procedures, regulations and governance processes
• Strong knowledge of technological trends and developments in the area of information security
• Experience in the utility industry including industrial control systems
• Knowledge of utility regulatory requirements
• 3 years of supervisory experience

#featuredjob