Deputy CISO - Director, Cybersecurity Architecture and Operations

Are you looking for a career in a dynamic and innovative company that values versatility, growth, and teamwork? Look no further than Delek US Holdings!

WHAT IS DELEK? WHAT DO WE DO?

We are a boutique-sized diversified downstream energy company with a range of assets, including petroleum refining and logistics.

• Our refineries in Texas, Arkansas, and Louisiana have a combined crude capacity of 302,000 barrels per day
• Our logistics business currently owns and operates 720 miles of crude and product pipelines, a 600-mile crude oil gathering system, and storage tanks and terminals.

 

DELEK BENEFITS

We offer fantastic benefits that include up to a 10% match on 401K on your hire start, with a vesting timeline of only one year, along with medical benefits that start on day one with a 30% premium rebate annually! We value your well-being and all employees now have access to the Calm app for FREE, which is used for meditation, stress management, and better sleep. Through our performance management program, you can earn additional annual incentives as you set and achieve goals. Our pay for performance culture motivates our employees to improve Delek’s year-over-year company, business unit, and individual results. With some of the highest bonus payouts in recent years, we know that our success is due to our talented and dedicated team. We are looking for individuals like you to help us continue this momentum and bring new ideas to the table. At Delek, you will have the opportunity to make an impact and grow your career in a supportive and innovative environment.

 

JOB SUMMARY 

Evaluates, tests, recommends, coordinates, monitors and maintains information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software. Ensures that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security. Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security. Develops techniques and procedures for conducting IS and cyber security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks. 

All activities will be performed in support of the strategy, and vision of the organization. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time. All activities must be in compliance with Equal Employment Opportunity laws, HIPAA, ERISA, and other regulations, as appropriate 

 

EDUCATION AND EXPERIENCE 

• 4 year / Bachelor's Degree (Required) 

• Master's Degree (Preferred) 

• Four (4) or more years Management experience (Required) 

• Ten (10) or more years Experience in a related field of security Architecture and security operations (Required) 

• Five (5) or more years Experience as a SOC lead, managing a team of analysts, Information Security/Cybersecurity 

• Proven experience managing complex cyber incidents across IT and OT, including executive coordination and regulatory reporting. 

• Skilled in using SIEM, SOAR, and forensic tools, with a strong grasp of frameworks like NIST and ISA/IEC-62443. 

• Strong organizational skills and ability to set priorities and handle multiple projects concurrently  

• Knowledge of cyber threat and/or intelligence analysis  

• Knowledge of cyber vulnerability management practices 

• CISSP, CISM, CISA, SANS, PMP are preferred 

• Solid understanding of cyber security and be able to analyze incident reporting and follow up with reporting sites 

• Strong knowledge of incident management, problem management and change management best practices