Principal Cybersecurity Engineer - Battery Storage

Company Overview 

Plus Power is an energy storage market leader, with a market-leading 10+ GW portfolio across more than 25 states that will transform North American electric grids into cleaner and more versatile critical infrastructure.

Standalone energy storage is rapidly transforming the North American energy markets, because it is cheaper than new natural gas plants, faster to build than fossil peakers or transmission, and able to perform diverse energy services. Plus Power partners with electricity system operators, utilities, and investors to originate, develop, finance, own and operate standalone energy storage projects that provide critical services to the wholesale electric market. Plus Power’s team applies an intentional mindset to energy storage development by using a data-driven approach to development and operations.

At Plus Power, we are focused on solving hard climate problems, profitably.  We are growing fast, and value candidates who, like us, share a focus on setting high expectations, owning and learning from mistakes in the spirit of radical transparency, and are committed to internal partnering as a key element of our ideas meritocracy. Our team praises Plus Power’s culture and excels through our game-changing mission and supportive ecosystem.

About the Role 

Plus Power recruits outstanding energy industry professionals who are driven to develop, build and operate assets safely and reliably to decarbonize the power markets while growing their careers. Our team looks for data-driven and fact-based mindsets, engaging and collaborative behaviors, and personal growth-focused professionals.     

In order for the global energy system to make the transition from a carbon-based grid, to a renewable energy grid, large scale energy storage must be introduced into the electricity system to balance intra-hour supply and demand.  Energy storage is the enabler of high penetration variable renewable generation like solar and wind. 

We are currently seeking a Principal Cybersecurity Engineer who will lead and execute on key cybersecurity activities and protections at the company. The ideal candidate has deep expertise and understanding of cybersecurity principles and frameworks, and has built or managed InfoSec, AppSec, SecOps, identity and access management, and data privacy programs. Reporting to the Manager of Information Technology, you will work cross functionally with our IT, Data Engineering, Data Science, Operational Technology, Asset Management, Engineering Procurement and Construction, Legal, External Relations, and HR teams to create strategies, policies, and manage cybersecurity controls and testing associated with our project needs and corporate needs.  

Key Responsibilities 

• Work day-to-day with a broad set of stakeholders and contributors to drive Plus Power’s cybersecurity program and activities aligning with the company’s compliance and security postures 
• Promote secure by design and secure by default strategies 
• Baseline, monitor, identify, and assess security vulnerabilities and risks in applications and infrastructure across operational technology (OT), information technology (IT), data science, and data engineering environments 
• Own and drive the resolution of different security events, control gaps, policy questions, and technical security risks 
• Contribute to building repeatable/reusable/systematic security processes and frameworks to identify potential security events, quantifying and documenting their feasibility, and enumerating the potential blast radius for the organization 
• Manage the company’s Compliance & Security Posture Management (CSPM) Platforms, and advance the enterprise's efforts to obtain cybersecurity framework certifications that align with compliance posture along with attestations to reassure internal stakeholders and external customers of our cybersecurity posture, including:  
• Provide project management for the implementation of security controls while operating cross-functionally  
• Conduct automated evidence collection operations to guarantee the longevity and uniformity of our controls 
• Assist with identification and mitigation of cybersecurity risks including compliance concerns (SOX, ISO, NERC-CIP, NIST CSF 2.0)  
• Develop, communicate, and assess the compliance stance of the framework in relation to internal and external policies 
• Build out and run a Third-Party Cyber Risk Management (TP