Director, Enterprise Security & Chief Information Security Officer

The New York Independent System Operator (NYISO) manages the efficient flow of electricity on more than 11,000 circuit-miles of high-voltage transmission lines, dispatching power from hundreds of generating units across the state.

The New York Independent System Operator (NYISO) applies cutting-edge technology to operating a reliable electricity system, managing competitive markets for wholesale electricity, and planning for the Empire State's energy future.  The NYISO’s Information Technology department invites applications for a full-time Director, Enterprise Security & Chief Information Security Officer.

The Director, Enterprise Security & Chief Information Security Officer is responsible for the design, implementation, and operations of the NYISO’s physical and cyber security programs to ensure the protection of NYISO assets, operations, and employees. This position is responsible for all aspects of the NYISO’s cyber and physical security program, including security risk management, threat & vulnerability management, incident response, data & information protection, security architecture, security infrastructure management, identity & access management, security training & awareness, and engagement on security matters with both internal and external entities, including government, law enforcement and NYISO stakeholders.

The Director, Enterprise Security & Chief Information Security Officer ensures a strong security posture across the organization, with a high degree of operational readiness and capability to detect and respond to continuously evolving threats and vulnerabilities. This position requires the development and management of key external relationships with security service providers, vendors, government intelligence partners, and law enforcement agencies.

The Director, Enterprise Security & Chief Information Security Officer leads participation in industry forums to augment the capabilities of the NYISO security staff and directs an internal team of security professionals charged with providing cyber and physical security services. The Director, Enterprise Security & Chief Information Security Officer oversees a security governance, risk, & compliance program that ensures adherence with applicable regulatory frameworks including NERC Critical Infrastructure Protection (CIP) standards and establishes trusted relationships throughout the electric utility industry to collaborate and share pertinent information. The Director, Enterprise Security & Chief Information Security Officer manages a team of cyber and physical security professionals, including a contract armed guard force, and reports directly to the Senior Vice President and Chief Information Officer.

ESSENTIAL DUTIES and RESPONSIBILITIES

• Provides vision and leadership to guide the development of the NYISO cyber and physical security strategy and strategic plan and directs the implementation of the strategy through annual resource, budgetary, and project planning activities.
• Directs all operational security functions, including oversight of the NYISO’s 24/7 Cyber Security Operations Center whose mission is to continuously monitor the threat landscape and immediately respond to events as necessary to protect the NYISO from cyber risks. Serves as senior cyber security escalation point for all cyber incidents and events and directs all activities across the organization during escalated cyber events and incidents.
• Oversees the cultivation of both classified and unclassified intelligence from government, law enforcement, and commercial partners, with processes that develop it into actionable information to be used by the cyber security analysts on the team.
• Leads the selection, design, engineering, and development of technical security infrastructure and cloud solutions. Develops security architectures to facilitate the application of security concepts and strategies into practical designs and configurations that are engineered to address evolving security challenges
• Oversees the NYISO’s Security Governance, Risk & Compliance programs including policies and practices ensuring the organization’s compliance with NERC Critical Infrastructure Protection standards, security components of Service Organization Control (SOC) 1, and other cyber and physical security standards. Engages in external outreach with NERC, NPCC, and other entities that audit NYISO’s compliance with regulatory standards.
• Oversees the NYISO physical security program, with accountability for the protection of facilities, property, and physical assets, as well as access control & badging systems, video surveillance, workplace violence prevention, and other areas as required. Manages a large contract guard force (including armed guards) to ensure the safety and protection of all who enter NYISO propert