Executive Director, OT Security

American Electric Power Co.; Columbus (OH); On-site; USD 189,000 - 245,000; Full time

Job summary

American Electric Power is seeking a Managing Director, OT Security to provide senior leadership for cybersecurity strategy across its Transmission, Distribution, Generation, and Nuclear fleet, including nuclear cybersecurity coordination. The role leads a shared-services OT Security organization and aligns priorities with enterprise security and regulatory obligations.

You will set vision, drive risk reduction, oversee architecture, vulnerability management, monitoring, incident response, and

Qualifications

• Bachelor's degree in engineering, computer science, or a related field is required.
• 15+ years of progressive experience in cybersecurity, OT, engineering, or operations.
• 7+ years in senior leadership roles with disruption management and governance.
• Direct experience securing electric utility OT environments across transmission, distribution, and generation.
• Experience with NERC CIP compliance and OT security architecture, monitoring, vulnerability management, and incident response.

Responsibilities

• Define OT Security strategy, multi-year roadmap, and service model for Transmission, Distribution, Generation, and Nuclear.
• Lead OT Security portfolio, ensuring ownership, quality, prioritization, and risk reduction.
• Partner with Business Units and Enterprise Security to align priorities, budgets, and governance.
• Represent OT security in executive forums and advise Board on risk, capability gaps, and investments.
• Ensure OT security controls, monitoring, and incident response readiness meet regulatory obligations.

Job description

American Electric Power is seeking a Managing Director, OT Security to provide senior leadership for cybersecurity strategy across its Transmission, Distribution, Generation, and Nuclear fleet, including nuclear cybersecurity coordination. The role leads a shared-services OT Security organization and aligns priorities with enterprise security and regulatory obligations.

You will set vision, drive risk reduction, oversee architecture, vulnerability management, monitoring, incident response, and