Cybersecurity Operations Manager

Job Type:

Regular

Plains All American is an industry-leading transportation and midstream provider specializing in transportation, storage, processing and marketing solutions for crude oil and natural gas liquids (NGLs). We own an extensive network of pipeline transportation, terminalling, storage and gathering assets in key crude oil and NGL producing basins and transportation corridors and at major market hubs in the United States and Canada. On average, Plains handles more than 6 million barrels per day of crude oil and NGL in its Transportation segment. The company is headquartered in Houston, Texas.

We are looking for highly-motivated individuals who enjoy working as part of a team in a dynamic and entrepreneurial work environment.

Job Summary

The Cybersecurity Operations Manager will be responsible for overseeing the daily operations of the cybersecurity team, contractors, and vendors. The primary objective is focused on protecting the organization’s personnel while also ensuring the safety and security of the organization's digital and physical assets. This role involves managing security personnel, developing and implementing security strategies, and working in partnership with other departments to address cybersecurity risks and/or incidents.   

The selected candidate will be eligible for company benefits including Medical, Dental, Vision, Paid Time Off (PTO), and Free Parking.

Job Responsibilities

• Supervise and manage the cybersecurity operations team, including scheduling, training, and performance evaluations.

• Develop, implement, and enforce security policies, procedures, and protocols to ensure the safety and security of the organization's assets.

• Monitor security systems, including surveillance cameras, alarms, and access control systems, to detect and respond to security incidents.

• Conduct regular security audits and assessments to identify vulnerabilities and recommend improvements.

• Coordinate with other departments, such as IT and facilities management, to address security concerns and ensure compliance with security policies.

• Understanding of cybersecurity controls across all vectors and the ability to detect, protect, and defend the organization against the evolving threat landscape.

• Investigate security incidents or anomalies and prepare detailed reports for management.

• Maintain accurate records of security incidents, personnel activities, and equipment maintenance.

• Provide guidance to security personnel on best practices and emergency response procedures.

• Ensure compliance with local, state, and federal regulations related to security and safety

Knowledge, Skills, and Experience Required

• Minimum of 5 years of experience in cybersecurity operations, with at least 2 years in a supervisory role.

• Education, combination of experience, thereof: A Bachelor's degree in cybersecurity, related field, or equivalent experience is required.

• Credentials and designations: Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (CIH), GIAC Security Essentials (GSEC), NIMS (National Incident Management System) or similar certification(s) preferred.

• Extensive knowledge of cybersecurity systems, protocols, and best practices.

• Experience leading and managing Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs).

• Strong leadership, collaboration, and management skills.

• Excellent communication and interpersonal skills.

• Ability to conduct cybersecurity investigations, audits, and assessments.

• Experience in investigating security incidents and preparing detailed reports.

• Knowledge of local, state, and federal regulations related to security and safety.

• Working knowledge of SecOps Platforms; working knowledge of project coordination, working knowledge of Cybersecurity Infrastructure & Security Agency Best Practices: Proficiency in tracking in Microsoft Excel, project management, and cybersecurity vendors is required. Familiarity with the organization's core energy software applications is also important for effectively managing SecOps functions.

• Deep Understanding of the following cybersecurity controls: Endpoint Detection and Response, Security Information and Event Management (SIEM), Email Protection, AppSec Protection, Network Detection and Response, Next Gen Firewalls, DevOps, Incident Handling, National Incident Management System (NIMS), Antivirus, anomaly tracking, containment, incident response, security and awareness training, i