Manager, Information Security Operations (Hybrid within commuting distance of Folsom, CA)

Company Description

The California Independent System Operator (ISO) manages the flow of electricity across the high-voltage, long-distance power lines that make up 80 percent of California's power grid. We safeguard the economy and well-being of 30 million Californians by operating the grid reliably 24/7.

As the impartial grid operator, the California ISO opens access to the wholesale power market that is designed to diversify resources and lower prices. It also grants equal access to 25,865 circuit-miles of power lines and reduces barriers to diverse resources competing to bring power to customers.

The California ISO's function is often compared to that of air traffic controllers. It would be grossly unfair for air traffic controllers to represent one airline and profit from allowing that company's planes to go through before others. In the same way, the California ISO operates independently—managing the electron traffic on a power grid we do not own—making sure electricity is safely delivered to utilities and consumers on time and reliably.

The California ISO is committed to the health, safety, and work/life integration of its employees, and is proud to offer flexible work arrangements. This position would be eligible to participate in a hybrid work capacity,

Relocation assistance is available.

Job Description

Under the general direction of the Director, manages the day-to-day operations and staff responsible for company-wide infrastructure operations and risk management related to information security operations. Manages activities aimed at safeguarding the organization's information assets and ensuring the alignment of security measures with overarching business objectives and regulatory standards. Ensures adherence to NERC Critical Infrastructure Protection (CIP), Statement on Standards for Attestation Engagements no. 18 (SSAE18), and related regulatory standards and frameworks. Responsible for maintaining the integrity, availability, and confidentiality of critical infrastructure and information systems. Oversees the planning and implementation of the enterprise IT systems, business operations and IT related facility defenses against security breaches and vulnerability issues and manages the administration of security policies, standards, and activities. Aligns strategies with operations-related business areas for the delivery and support of critical business solutions, balancing business needs and cost of ownership, while achieving customer satisfaction.  Ensures business solution roadmaps and IT activities achieve short and long-term ISO security objectives. Delivers feasible business solution roadmaps and proactive system management, oversees strategic software vendor relationships related to security, and guides the implementation and continuous improvement of our security posture. Responsible for the overall success of Information Security Operations and related business solutions.

What You Will Be Doing: 

• Manages the day-to-day for the information security operations and staff.  Responsible for providing broad direction and guidance, identifies training needs, coaches and gives feedback on employee performance, develops staff performance plans, makes recommendations with respect to the hiring, firing, advancement, promotion or any other change in the status of direct reports, and performs related activities as appropriate.
• Provides expert consultation on IT risks and compliance standards. Reviews existing security risks and challenges, implements and enforces risk management processes and common control frameworks, and executes incident management processes. Develops a proactive threat intelligence strategy and oversees the incident response process. Collaborates with cybersecurity organizations globally and conducts regular threat assessments. Participates in the development, maintenance and implementation of disaster recovery and business continuity plans, procedures, audits and ongoing enhancements. Acts a liaison with business partners to ensure interfaces between entities are secured and managed consistent with applicable laws, policies, standards, guidelines and best practices.
• Manages strategic customer relationships and collaborates on strategic planning of service level agreements. Identify opportunities for process improvement, innovations and technology solutions to advance business capabilities. Creates, implements, and ensures compliance with policies and frameworks for the overall monitoring and management of staff, processes, and system performance to meet department and CAISO objectives. Provides leadership and removes obstacles to achieve successful planning and delivery of quality, cost-effective business solutions and innovations. Fosters and oversees strategic relationships with internal and external partners, including government agencies, bus