Job Details
Location: Oakland, CA
Duration: August 03, 2026 – December 31, 2027
Notes: This is a hybrid role requiring onsite presence as needed.
Job Responsibilities
- Regulatory & Strategic Leadership: Act as a liaison between the Cybersecurity Department and regulatory agencies. Lead steering committees and enterprise-wide cybersecurity initiatives. Provide strategic guidance for operating plans and budgets.
- Strategy & Risk Management: Lead enterprise-wide cybersecurity strategy roadmaps. Oversee a living risk portfolio to describe the aggregated risk posture of business units.
- AI/ML Security: Evaluate AI/ML models for algorithmic bias, data leakage, adversarial attacks (e.g., prompt injection), and structural integrity. Ensure adherence to frameworks like the NIST AI Risk Management Framework. Collaborate with legal teams to establish usage policies and "harm taxonomies."
- OT Security: Conduct consequence-based risk assessments on Industrial Control Systems (ICS), SCADA systems, and PLCs. Develop and implement OT-specific security policies aligned with NIST 800-82.
Qualifications
Education
- Minimum: B.S. degree in Computer Science, Information Systems, or a related field, or equivalent experience.
- Desired: Master’s degree in computer science or a related discipline.
Experience
- Minimum: 8 years of combined IT, critical infrastructure, intelligence, and/or cyber/information security experience.
- Desired: Utility industry experience; expertise in IT security, multi-platform environments, and operational technology (OT) security.
Licenses & Certifications
- Minimum: CompTIA Security+, SANS, Cisco, GIAC, Microsoft Security, or equivalent.
- Desired: CISSP, CISM, CRISC, CISA, or equivalent.
Knowledge, Skills, and Abilities
- Strong communication, analytical, critical thinking, and decision-making skills.
- Ability to influence and lead behavior change while balancing business priorities.
- Multi-platform knowledge (UNIX/LINUX, Windows, Cisco hardware).
- Deep understanding of critical business processes, network security, and ODN/UDN.
- Mastery of security management policies, governance, risk management, and compliance (NIST, ISO, SOX, NERC CIP, CCPA, HIPAA, NRC).