Information Security Director

Essential Utilities, Inc. delivers safe, clean, reliable services that improve quality of life for individuals, families, and entire communities.

Operating as the Aqua (water and wastewater services) and the Peoples and Delta (natural gas) brands, Essential serves approximately 5.5 million people across 10 states. We are committed to sustainable growth, operational excellence, a superior customer experience, and premier employer status - including a competitive and comprehensive benefits package as well as a commitment to career growth opportunities.

We are advocates for the communities we serve and are dedicated stewards of natural lands, protecting more than 7,600 acres of forests and other habitats throughout our footprint.

Our company is one of the most significant publicly traded water, wastewater service and natural gas providers in the U.S.

Essential Utilities is now looking to appoint an Information Security (InfoSec) Director who will play a critical role in leading and spearheading Information Security, Cybersecurity, Technology Risk Management and Compliance across Information Technology (IT) and Operational Technology (OT).   As InfoSec Director you will collaborate closely with OT, IT, and business stakeholders at all levels across our Water, Wastewater, and Natural Gas sectors, with this role tasked with ensuring the development, implementation and operation of programs, capabilities, governance, and policies that enable the organization to innovate and operate efficiently while effectively managing cyber risks and ensuring compliance with regulatory requirements. 

Ready to take your career to the next level? Let's Talk!

Key accountabilities include:  

• Functioning as the strategic leader for Information Security, Cybersecurity, Compliance and Privacy, acting as a subject matter expert responsible for strategy, standards, policies, and control frameworks. 

• Direct and provide a strategic risk management vision to effectively secure the business while supporting innovation and execution. 

• Experience developing multi-year strategic roadmaps addressing the threat and compliance landscapes for both IT and OT/ICS/SCADA. 

• Ensuring alignment with regulatory compliance obligations and emerging cybersecurity standards. 

• Foster an enterprise-wide culture of security awareness for both IT and OT. 

• Oversees and manages the teams and functions for Security Operations & Engineering, Governance Risk and Compliance (GRC), Identity & Access Management, and SAP Security. 

• Ensure operation and continuous improvement of capabilities for vulnerability management, threat management, and incident response. 

• Engage with regulators and industry groups on topics related to cybersecurity in critical infrastructure. 

The ideal candidate will possess strong technical expertise in environments with large, complex, and distributed technology environments with experience in enterprise IT and OT, with regulated utilities experience preferred.  Ability to communicate with both technical teams and executive leadership appropriately, with effective stakeholder management at all levels. 

Required Experience, Education, Licenses, and Certifications:

• Minimum of 10 years leadership role in technology with at least five having direct responsibility for Information Security programs and strategy management. 

• B.S. or equivalent degree in Computer Science, Engineering, Information Sciences & Technology, Information Assurance, or related field. 

• Certifications:  CISSP and CISM strongly preferred wi