POSTING DEADLINE
DEPARTMENT
Department: Operations Technology
JOB DESCRIPTION
Associate Director, Operations Technology
Salary Grade: G03
Minimum Midpoint Maximum
$127,606 - $172,268 - $216,930
This position is covered by NERC CIP cyber security standards. Prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training. Annual cyber security training is also required.
Given the financial nature of this position, this position has been defined as a position requiring a credit check. Prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a credit background check.
SUMMARY:
Leads teams to develop and implement an overall strategy for OT, designs and implements security, compliance solutions, and maintains effective partnerships. Supports the company¿s formal NERC Internal Compliance Program, maintains compliance with any and all mandatory reliability standards. Incumbents shall maintain knowledge of the NERC Critical Infrastructure Protection (CIP) Standards.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Ensures that OT systems are properly installed, secured, maintained, and monitored
Provides specialized engineering, field expertise and project support of OT network, infrastructure, security, applications, and technology deployment
Aligns security and compliance solutions with Company vision and strategy
Directs and oversees the development and delivery of technical training on new and emerging technologies as part of implementation or as requested
Facilitates development, testing and installation, and associated controls for cyber and physical security technology solutions in regulated Operational Technology environments
Ensures practices adhere to applicable compliance requirements, guidelines, procedures and policies
Manages the annual departmental budget
Develops and leads teams ensuring a focus on succession planning and minimizing single points of failure
Establishes and manages key performance metrics and indicators for technology solutions and the team
Supports continuity planning including incident event management, incident response, and disaster recovery
Assists with development of control system and information system strategy and design for network security and system architecture
Acts as a subject matter expert to process and respond to physical and cyber security alerts issued through the E-ISAC, ICS-CERT, US-CERT as applicable
Responsible for the development of overall departmental policies that are related to the DBA function
Develops reports for senior leaders as requested
COMPETENCIES:
Ability to interpret and apply corporate security, architecture, and technology governance to discrete Operational Technology systems
Demonstrated ability to effectively direct and manage a geographically diverse team
In-depth understanding of technology, compliance and security directions, trends and strategic business impacts of key business and technology initiatives
In-depth experience in client consulting, project management, change management and development of RFXs, knowledge of SCADA systems and Critical Infrastructure Protection, working knowledge of NIST, COBIT, ITIL and other relevant framework(s) and supporting processes
Experience in preparing proposals, presentations, status reports and direct interaction with senior-level management
Excellent interpersonal skills and the ability to work effectively across the organization as well as outside stakeholders, including, but not limited to, national and international organizations, governmental agencies/entities, universities, national laboratories, and vendors
Ability to actively participate in industry strategy, policy setting, planning, operating and/or commercial practices committees
Knowledge of electric distribution, transmission, and generation systems
Ability to operate in a transforming environment and culture, create change, advance ideas and be comfortable with ambiguity
Knowledge budget process and preparation
Ability to manage complex projects, especially involving highly technical concepts, and multi-disciplined team of senior technical professionals
Ability to identify and resolve problems in a timely manner, gather and analyze information skillfully, develop alternative solutions, and work well in group problem-solving situations
QUALIFICATIONS
MINIMUM EDUCATION AND/OR EXPERIENCE:
Bachelors degree in a related technology/computer field with seven to nine years of relevant management experience, or equivalent combination of education and/or experience related to this position.
Direct work experience in compliance, Control Systems, Energy Management Systems, SCADA, cyber-security, and/or physical security related experience strongly preferred.
Masters degree is preferred.
CERTIFICATIONS:
Certification in security or systems control related field: CISSP, CISA, CISM, or generally accepted equivalent is required.
SUPERVISORY RESPONSIBILITIES:
Ability to strategically plan, organize, and tactically lead in support of key business activities and goals. Attracts, retains, and develops high caliber employees. Accurately appraises strengths and weaknesses of others and provides constructive feedback. Fosters a culture that facilitates continuous learning and development.
COMMUNICATION SKILLS:
Advanced negotiation skills and ability to gain concessions without damaging relationships
Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations
Ability to write reports, business correspondence, and procedure manuals
Ability to effectively give persuasive speeches and presentations on controversial or complex topics to diverse audiences
MATHEMATICAL SKILLS:
Ability to apply advanced mathematical concepts related to engineering disciplines and financial analysis
COMPUTER SKILLS:
Strong, working knowledge of the Microsoft Office Suite and Microsoft SharePoint administration. Working knowledge and experience with high-availability computer networks
Knowledge of industry standard and best practice cyber security protection measures and understand cyber security approaches and systems
Strong working knowledge of current marketed security tools and technologies
Strong working knowledge of industry regulations and industry security standards
ANALYSIS AND PROBLEM-SOLVING ABILITY:
Ability to strategically approach issues. Must be proactive, adept at working with cross-functional teams and stakeholder groups
Ability to synthesize complex information
Ability to apply creativity to problem solving and utilize analytic skills and modeling capabilities
Ability to identify mitigation plans as necessary
Ability to coordinate with and lead cross-functional teams
DECISION MAKING:
Ability to make quick, effective decisions in a rapidly changing and demanding environment.
SCOPE AND IMPACT:
Electronically protects all enterprise computing platforms for the purpose of providing and preserving confidentiality, integrity, and availability of all corporate systems, applications and data. Electronic protection of systems within the scope of this position is intended to minimize potential costs directly related to operational, legal, regulatory, and reputation risk from loss of enterprise system operation or confidential or proprietary information. Failure to protect systems from unauthorized electronic access exposes Company to heightened regulatory oversight, monetary sanctions, and increases vulnerability to malicious cyber-attack against Company cyber assets essential to enterprise operations.
PHYSICAL DEMANDS:
Regularly required to sit for long periods of time. Manual dexterity is required. Must occasionally lift and/or move up to 20 pounds.
In and out of state travel may be required.
WORK ENVIRONMENT:
Office environment.
SAFETY AND ADA STATEMENT
Safety Statement:
Safety is a core value at (TXNM Energy/PNM/TNMP) and our vision, "everyone goes home safe", reflects our commitment to promoting an environment conducive to learning, improving and building safety practices. Our safety value is built upon the belief that every employee deserves to work in an environment free from harm.
Americans with Disabilities Act (ADA) Statement:
If you require assistance with the job application process due to a disability, please contact HR ADA Analyst, at 505-241-4627.
