Director, OT Operations, Cybersecurity, Governance

Cypress Creek Renewables

. Define and execute a multiyear OT strategy and roadmap aligned with fleet growth, operational priorities, cybersecurity risk, and business objectives .

Posted 11/3/2026full-timeRemote • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and executing operational technology strategies, managing cybersecurity programs, and ensuring regulatory compliance within critical infrastructure environments. Proven ability to lead multidisciplinary teams, manage vendor relationships, and drive continuous improvement in operational performance.

Highest-signal resume keywords

OT Strategy DevelopmentCybersecurity Program ManagementRegulatory Compliance OversightLeadership in OT OperationsRisk Management Framework

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ICS/SCADA ManagementVulnerability ManagementNetwork SegmentationIncident Response PlanningControl Framework DevelopmentBudget ManagementRisk AssessmentTechnical Due DiligenceChange ControlDisaster Recovery Planning

Soft Skills

Cross-Functional CollaborationTeam LeadershipExecutive CommunicationMentoringProblem Solving

Tools & Technologies

NERC CIPNIST CSFNIST 800-82SCADA SystemsCybersecurity Tools

Certifications & Qualifications

CISSPCISMCRISCGICSPCEH

Industry Keywords

Operational TechnologyIndustrial CybersecurityCritical InfrastructureDistributed Energy InfrastructureCompliance Programs

Tech Stack

Tools & technologies

Cyber SecurityCypress

About the role

Key responsibilities & impact

Define and execute a multiyear OT strategy and roadmap aligned with fleet growth, operational priorities, cybersecurity risk, and business objectives
Establish the OT operating model, service ownership, decision rights, accountability, and performance expectations across internal teams and service providers
Lead, mentor, and develop multidisciplinary OT operations, engineering, governance, and cybersecurity personnel
Develop annual operating and capital budgets, business cases, staffing plans, and investment priorities
Prioritize initiatives using risk, reliability, lifecycle condition, regulatory obligations, cost, and business value
Provide executive-level reporting on OT strategy, financial performance, resource needs, material risks, and delivery milestones
Own the OT cybersecurity program, control framework, roadmap, and risk-based priorities
Direct asset inventory, network segmentation, vulnerability management, secure configuration, patching, endpoint protection, and security monitoring
Establish identity, privileged access, multifactor authentication, vendor remote access, removable media, and transient cyber asset requirements
Lead OT cyber incident preparedness, response, escalation, communications, lessons learned, and corrective-action tracking
Coordinate threat intelligence, detection engineering, security monitoring, and response workflows with enterprise cybersecurity and site operations
Measure and communicate cybersecurity maturity, control effectiveness, exposure trends, remediation progress, and residual risk
Oversee NERC CIP, O&P, and internal compliance obligations; translate requirements into procedures, controls, evidence standards, and operating routines
Maintain audit-ready documentation and evidence; lead readiness assessments, internal reviews, auditor or regulator engagement, evidence requests, and remediation planning
Establish and maintain an OT risk-management framework, risk register, control library, exception process, and accountable risk owners
Facilitate risk assessments for sites, systems, projects, vendors, architecture changes, acquisitions, and emerging threats
Define remediation plans, compensating controls, target dates, escalation criteria, and risk-acceptance requirements
Align OT governance with NIST CSF and NIST SP 800-82
Direct day-to-day delivery of SCADA, control systems, OT networks, servers, workstations, historians, communications, and supporting services
Establish service levels, operating procedures, on-call coverage, escalation paths, maintenance windows, and incident/problem-management practices
Govern change, configuration, release, capacity, availability, and lifecycle-management processes
Sponsor resilient architecture, tested backups, disaster recovery, continuity plans, redundancy, and restoration exercises
Coordinate commissioning, operational acceptance, documentation, support transition, and standardization for new or acquired assets
Drive root-cause analysis, corrective actions, technical-debt reduction, automation, and continuous improvement
Define security, service, documentation, support, resilience, notification, and access requirements for OT vendors and service providers
Lead technical due diligence, cybersecurity assessments, product selection, contract input, and onboarding for third parties and managed services
Govern vendor identities, privileged access, remote connectivity, session oversight, approval workflows, and timely access removal
Monitor service levels, control performance, vulnerabilities, end-of-life exposure, support quality, costs, and corrective actions
Ensure contracts address incident reporting, breach notification, evidence support, data handling, business continuity, and exit obligations
Maintain strategic supplier relationships and escalate material performance, cybersecurity, compliance, or delivery concerns
Partner with operations, engineering, asset management, IT, enterprise cybersecurity, compliance, legal, procurement, finance, and project delivery teams
Translate operational needs and technical risks into priorities, investment decisions, delivery plans, and executive recommendations
Support project design reviews, architecture decisions, commissioning, acquisitions, integrations, and operational handoffs
Facilitate governance forums that resolve competing priorities, approve exceptions, assign accountability, and remove delivery barriers
Define performance, risk, control, service, reliability, recovery, financial, and delivery indicators
Establish dashboards and reporting cadences for operational and executive stakeholders
Monitor availability, incidents, vulnerabilities, patch status, backup success, recovery testing, lifecycle exposure, and remediation performance
Conduct control testing, service reviews, maturity assessments, post-incident reviews, and independent assurance activities
Validate corrective actions and use performance and risk trends to drive investment, resource allocation, process improvement, and roadmap adjustments

Requirements

What you’ll need

Advanced technical degree in fields such as engineering, computer science, information systems, or a related technical field
10+ years of relevant experience, including 5+ years of leadership, in OT operations, ICS/SCADA, industrial cybersecurity, or critical infrastructure technology
Demonstrated experience leading technical teams, managing vendors and budgets, and delivering multiyear operational or cybersecurity programs across distributed facilities
Experience overseeing technical and regulatory teams and programs, along with elevating program maturity
Proven success in implementing and maintaining regulatory compliance programs
Knowledge of NERC processes and ability to oversee audits and data requests
Experience establishing governance, risk management, change control, compliance evidence, and tested business continuity and disaster recovery processes
Ability to translate technical and operational risks into executive decisions, build cross-functional alignment, and balance cybersecurity, reliability, cost, and business priorities
Ability to embrace and live by the mission and values of Cypress Creek Energy
Preferred: Leadership experience supporting ICS/SCADA or OT environments in solar, storage, wind, utilities, or other distributed energy infrastructure
Preferred: Experience leading NERC CIP and O&P compliance support, evidence readiness, and audit remediation
Preferred: Familiarity with NIST 800-82 and NIST CSF
Preferred: Experience selecting and governing comparable OT/cybersecurity tools, including vendor evaluation, service integration, and lifecycle planning
Preferred: Relevant certifications such as CISSP, CISM, CRISC, GICSP, or CEH

Benefits

Comp & perks

15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays
401(k) Match
Comprehensive package including medical, dental, vision and health insurance
Wellness stipend
Family planning stipend
Generous parental leave
Tuition Reimbursement
Phone Bill Reimbursement
Company Swag
Professional growth opportunities
Opportunities to take ownership, expand expertise, and advance your career