Senior Manager - Cyber IAM

Base salary ranges by location: $134,720 – $168,400 (NY), $148,160 – $185,200 (CT).

Responsibilities

• Provide leadership and support across Avangrid Networks to advance cybersecurity Identity and Access Management (IAM).
• Design, implement, operate, and evolve IAM solutions and strategies for Avangrid Networks operating companies in support of Grid Digitalization.
• Drive the shift from perimeter-based security to continual verification of each user, device, application, and transaction.
• Lead the deployment of IAM services and solutions to support Avangrid’s evolution toward a zero-trust security framework.
• Define, develop, and implement an IAM strategy that reduces risk, provides resiliency, and enables business initiatives.
• Engage with and advise business stakeholders on IAM best practices.
• Leverage IAM technology investments to expand core capabilities and integrate high-quality, highly available access management solutions.
• Lead federation of physical and logical access management services in support of global IAM federation objectives.
• Ensure IAM services and solutions comply with industry best practices and applicable privacy, legal, and regulatory requirements, including NIST 800-63, GDPR, SOX, CEII, and NERC.
• Support implementation of GRC automation tools to manage compliance processes and evidence for applicable IAM services.
• Establish a well-defined, highly available, repeatable IAM service model measured by key performance, risk, and operational metrics.
• Ensure best-in-class control quality and assurance for IAM solutions through established measurements and methods.
• Follow federal agency guidance on IAM technologies relevant to Grid Modernization and assess impact on Avangrid Networks business model.
• Lead, develop, maintain, and write IAM cybersecurity policies, rules, standards, and guidelines.
• Participate in external industry groups, including the Electricity Sector Coordinating Council (ESCC), in support of the OSG Governance and Risk team.
• Research current IAM industry and government frameworks, vulnerabilities, and risk trends, and assess impact.
• Assess vendors/third-party IAM solutions for compliance with cyber standards and policies.
• Establish vendor processes and metrics for IAM cyber assurance.
• Analyze current and future IAM vendors, hardware, and software for grid modernization and assess cyber exposure impacts.
• Respond to audits, participate in cybersecurity-related committees, and explain policy impacts at all levels of the company.
• Educate members and government agencies during cyber and physical events as required.
• Interact with the Department of Energy (DOE), Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA), Federal Bureau of Investigation (FBI), and other relevant agencies on security and grid modernization issues.
• Lead development and integration of IAM services and solutions for Grid Modernization, including:
  • Network Automation
  • Smart Metering
  • Resilient Telecommunications
  • Intelligent/automatic centralized operations
  • Digital Asset Management
  • Digital-enabled organization
  • Distribution Automation
  • Real-Time Systems
  • DER Management

Requirements

• Master’s Degree in Engineering, Computer Science, or Business Management with a minimum of 8+ years’ experience in Cybersecurity; or
• Bachelor’s Degree in Engineering, Computer Science, or Business Management with a minimum of 10+ years’ experience in Cybersecurity.
• 5+ years of experience in Business Decision Support, including Cybersecurity Risk Indicators and Performance/Metrics reporting.

Skills

• Strong communication and administration skills related to cybersecurity technology.
• Strong system engineering and integration background for complex systems and networking.
• Strong understanding of current and future state of cyberspace.
• Desired:
  • Security clearance at secret level or above (preferable).
  • Knowledge of federal government cybersecurity activities and practices.
  • Experience in federal or state regulatory environments.
  • Experience in federal cybersecurity agencies and environments.
  • Experience in a utility environment.
  • Certified Information Systems Security Professional (CISSP).
  • Certified Identity and Access Manager (CIAM).
• Competencies:
  • Growth & Continuous Improvement
  • Initiative & Change
  • Focused on Results
  • Customer Centric (internal and/or external)
  • Communication
  • Collaboration
  • Leadership (people managers/leaders)

Mobility: Applicants who are not citizens of the country of the vacancy will be subject to compliance with applicable immigration requirements.