Director of Cybersecurity

WSP; Houston (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

WSP is seeking an experienced Director of Cybersecurity to lead planning, design, and assurance of cybersecurity programs across critical infrastructure projects.

This is a hands-on role embedded within project delivery teams, partnering with clients, engineers, program managers, technology specialists, and executives to ensure cyber requirements are designed, implemented, and validated throughout the lifecycle.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Engineering, or related field (Master's preferred).
• 15+ years of cybersecurity experience across infrastructure programs.
• 5+ years leading cybersecurity programs or consulting.
• Experience with federal/state regulatory compliance and risk management.

Responsibilities

• Lead cybersecurity planning and execution for major programs across infrastructure sectors.
• Develop project-specific cybersecurity strategies, roadmaps, and implementation plans.
• Integrate cyber requirements into delivery processes and specifications.
• Collaborate with multidisciplinary teams and act as primary advisor to executives.

Skills

Cybersecurity leadership

Client-facing consulting

Project management

OT/ICS security

Regulatory compliance

Education

Bachelor's degree in Cybersecurity

Master's degree preferred

Tools

NIST CSF

FISMA

ISO 27001

Job description

This Opportunity

We are seeking an experienced Director of Cybersecurity to lead the planning, design, implementation, and assurance of cybersecurity programs across major infrastructure, transportation, energy, utilities, aviation, and public sector projects. This is a hand on/seller-doer role. Unlike traditional corporate IT security roles, this position is embedded directly within project delivery teams, partnering with clients, engineers, program managers, technology specialists, and executive stakeholders to ensure cybersecurity requirements are designed, implemented, validated, and maintained throughout the project lifecycle.

The successful candidate will serve as a technical leader, trusted advisor, and project delivery professional, providing cybersecurity expertise for digital transformation initiatives, operational technology (OT) environments, cloud implementations, Project Management Information Systems (PMIS), critical infrastructure programs, and enterprise technology deployments.

This role combines technical cybersecurity expertise, client engagement, project management, regulatory compliance, risk management, and strategic advisory services.

Your Impact

Project Cybersecurity Leadership

• Lead cybersecurity planning and execution for major infrastructure, transportation, utility, energy, aviation, water, and public sector programs.


• Develop project-specific cybersecurity strategies, architectures, roadmaps, and implementation plans.


• Integrate cybersecurity requirements into project delivery processes, procurement packages, technical specifications, and solution designs.


• Collaborate with multidisciplinary engineering, program management, and technology delivery teams.


• Serve as the primary cybersecurity advisor for project executives, program managers, and client stakeholders.


• Support project pursuits, proposals, presentations, and client interviews.

Security Governance, Risk, and Compliance

• Conduct cybersecurity risk assessments and maturity evaluations.


• Develop and maintain security policies, standards, procedures, and governance frameworks.


• Lead compliance initiatives supporting federal, state, and industry requirements.


• Perform gap assessments and remediation planning against established cybersecurity frameworks.


• Support audits and independent security assessments.


• Develop Plans of Action and Milestones (POA&M) and track remediation activities.

Security Architecture and Technical Assurance

• Review and approve cybersecurity architecture for cloud, enterprise, operational technology, and PMIS environments.


• Evaluate technology platforms, integrations, and vendor solutions from a cybersecurity perspective.


• Define identity management, access control, network segmentation, encryption, monitoring, and incident response requirements.


• Support secure system design reviews and cybersecurity validation activities.


• Guide implementation of security controls across project technology ecosystems.

Critical Infrastructure and Operational Technology Security

• Support cybersecurity initiatives involving:
  
  
  
  • Industrial Control Systems (ICS)
  
  
  • SCADA environments
  
  
  • Operational Technology (OT)
  
  
  • Intelligent Transportation Systems (ITS)
  
  
  • Connected and Autonomous Vehicle infrastructure
  
  
  • Utility control systems
  
  
  • Airport and transit technologies
  
  
  
  


• Lead cybersecurity assessments of critical infrastructure environments.


• Develop security strategies that balance operational reliability and cyber resilience.

Incident Response and Security Resilience

• Develop and maintain incident response plans and recovery procedures.


• Support cybersecurity incident investigations and response activities.


• Conduct tabletop exercises, simulations, and security preparedness reviews.


• Develop business continuity and disaster recovery recommendations.

Business Development and Client Engagement

• Identify cybersecurity opportunities across infrastructure markets.


• Support strategic pursuits and proposal development activities.


• Participate in conference presentations, thought leadership initiatives, and client workshops.


• Build trusted relationships with executive leadership and client stakeholders.

Team Leadership

• Mentor cybersecurity professionals, project managers, and technical staff.


• Support recruiting, workforce development, and technical training initiatives.


• Foster a culture of cybersecurity awareness and continuous improvement.


• Provide technical quality reviews and subject matter expertise across project portfolios.

Who You Are

Minimum Requirements:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Systems, or related discipline, or equivalent. Master's degree preferred.


• 15+ years of cybersecurity experience.


• 5+ years leading cybersecurity programs, projects, or consulting engagements.


• Demonstrated experience supporting infrastructure, transportation, aviation, utility, energy, water, or government projects.


• Experience serving in client-facing consulting or advisory roles.


• Proven ability to lead multidisciplinary project teams.

Technical Expertise:

• Experience with several of the following:


• FISMA


• NIST Cybersecurity Framework (CSF)


• NIST 800-53


• NIST 800-171


• FedRAMP


• ISO 27001


• CIS Critical Security Controls


• NERC-CIP


• PCI-DSS


• HIPAA/HITRUST


• Zero Trust Architecture


• Cloud Security (Azure, AWS, Google Cloud)


• OT/ICS Security


• Vulnerability Management


• Security Operations and Monitoring


• Identity and Access Management


• Security Architecture Reviews


• Risk Management and Compliance Programs

Preferred Experience:

• Utility transmission and distribution programs.


• Energy generation facilities.


• Airport technology systems.


• Rail and transit programs.


• Intelligent transportation systems.


• Major capital project delivery organizations.


• PMIS and construction technology platforms.


• Smart infrastructure and connected mobility initiatives.


• Cloud-hosted enterprise applications supporting public agencies.

Certifications:

• CISSP


• CISM


• CGRC (formerly CAP)


• CCSP


• CRISC


• GIAC Certifications


• Security+


• ISO 27001 Lead Auditor


• Certified Ethical Hacker (CEH)

Why Join Us?

You will help secure some of the nation's most important infrastructure programs while working directly with project delivery teams, owners, engineers, and technology professionals. This role offers the opportunity to influence large-scale digital transformation initiatives, critical infrastructure modernization efforts, and emerging smart infrastructure programs while shaping cybersecurity strategy from project conception through operation.

#LI-MP1