Cypress Creek Renewables

Security Engineer

• Define and execute a multiyear OT strategy and roadmap aligned with fleet growth, operational priorities, cybersecurity risk, and business objectives
• Establish the OT operating model, service ownership, decision rights, accountability, and performance expectations across internal teams and service providers
• Lead, mentor, and develop multidisciplinary OT operations, engineering, governance, and cybersecurity personnel
• Develop annual operating and capital budgets, business cases, staffing plans, and investment priorities
• Prioritize initiatives using risk, reliability, lifecycle condition, regulatory obligations, cost, and business value
• Provide executive-level reporting on OT strategy, financial performance, resource needs, material risks, and delivery milestones
• Own the OT cybersecurity program, control framework, roadmap, and risk-based priorities
• Direct asset inventory, network segmentation, vulnerability management, secure configuration, patching, endpoint protection, and security monitoring
• Establish identity, privileged access, multifactor authentication, vendor remote access, removable media, and transient cyber asset requirements
• Lead OT cyber incident preparedness, response, escalation, communications, lessons learned, and corrective-action tracking
• Coordinate threat intelligence, detection engineering, security monitoring, and response workflows with enterprise cybersecurity and site operations
• Measure and communicate cybersecurity maturity, control effectiveness, exposure trends, remediation progress, and residual risk
• Oversee NERC CIP, O&P, and internal compliance obligations; translate requirements into procedures, controls, evidence standards, and operating routines
• Maintain audit-ready documentation and evidence; lead readiness assessments, internal reviews, auditor or regulator engagement, evidence requests, and remediation planning
• Establish and maintain an OT risk-management framework, risk register, control library, exception process, and accountable risk owners
• Facilitate risk assessments for sites, systems, projects, vendors, architecture changes, acquisitions, and emerging threats
• Define remediation plans, compensating controls, target dates, escalation criteria, and risk-acceptance requirements
• Align OT governance with NIST CSF and NIST SP 800-82
• Direct day-to-day delivery of SCADA, control systems, OT networks, servers, workstations, historians, communications, and supporting services
• Establish service levels, operating procedures, on-call coverage, escalation paths, maintenance windows, and incident/problem-management practices
• Govern change, configuration, release, capacity, availability, and lifecycle-management processes
• Sponsor resilient architecture, tested backups, disaster recovery, continuity plans, redundancy, and restoration exercises
• Coordinate commissioning, operational acceptance, documentation, support transition, and standardization for new or acquired assets
• Drive root-cause analysis, corrective actions, technical-debt reduction, automation, and continuous improvement
• Define security, service, documentation, support, resilience, notification, and access requirements for OT vendors and service providers
• Lead technical due diligence, cybersecurity assessments, product selection, contract input, and onboarding for third parties and managed services
• Govern vendor identities, privileged access, remote connectivity, session oversight, approval workflows, and timely access removal
• Monitor service levels, control performance, vulnerabilities, end-of-life exposure, support quality, costs, and corrective actions
• Ensure contracts address incident reporting, breach notification, evidence support, data handling, business continuity, and exit obligations
• Maintain strategic supplier relationships and escalate material performance, cybersecurity, compliance, or delivery concerns
• Partner with operations, engineering, asset management, IT, enterprise cybersecurity, compliance, legal, procurement, finance, and project delivery teams
• Translate operational needs and technical risks into priorities, investment decisions, delivery plans, and executive recommendations
• Support project design reviews, architecture decisions, commissioning, acquisitions, integrations, and operational handoffs
• Facilitate governance forums that resolve competing priorities, approve exceptions, assign accountability, and remove delivery barriers
• Define performance, risk, control, service, reliability, recovery, financial, and delivery indicators
• Establish dashboards and reporting cadences for operational and executive stakeholders
• Monitor availability, incidents, vulnerabilities, patch status, backup success, recovery testing, lifecycle exposure, and remediation performance
• Conduct control testing, service reviews, maturity assessments, post-incident reviews, and independent assurance activities
• Validate corrective actions and use performance and risk trends to drive investment, resource allocation, process improvement, and roadmap adjustments

Explore Director, OT Operations, Cybersecurity, Governance at Cypress Creek Renewables. Review requirements and application details.

Open roles

Director, OT Operations, Cybersecurity, Governance