Manager, IT Cybersecurity

SkyVest; Houston (TX); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Annual bonus

Healthcare plans

401(k) match

Flexible schedule

Descripción de la vacante

SkyVest Renewables is building out an enterprise cybersecurity program and seeks a Manager, Cybersecurity based in Houston, TX or Newtown, PA. This hands-on role partners with the IT Infrastructure & Network Manager to own identity, endpoint, and network security, while supporting the initial build-out of security foundations.

You will lead the security program, manage SIEM/SOAR/EDR, IAM/MFA, DLP, and vulnerability management, supervise vendors, and mentor staff.

Formación

• Bachelor's degree in cybersecurity, computer science, information technology, or related field, or equivalent practical experience.
• 5+ years of progressive cybersecurity experience including renewable OT environment, including program or team leadership.
• Strong expertise in core security technologies (IAM/MFA, EDR, SIEM, vulnerability management) and Zero Trust principles.
• Experience with Microsoft security tooling: Entra ID, Defender, and related enterprise technologies.
• Excellent communication, documentation, and vendor management skills.
• Comfort selecting, deploying, and managing a security platform through a vendor, without requiring prior hands-on OT/ICS engineering experience personally.

Responsabilidades

• Own the enterprise cybersecurity program end-to-end, including IAM/MFA, EDR, SIEM, SOAR, and incident response.
• Design enterprise security architecture and Zero Trust roadmap; establish policies and standards.
• Lead risk assessments, audits, penetration testing, and remediation with vendor involvement.
• Maintain alignment with NIST CSF, CIS Controls, ISO 27001; lead SOC 2 or similar attestations.

Conocimientos

IAM/MFA

EDR

SIEM

Vulnerability mgmt

Zero Trust

Vendor management

Security architecture

Communication

Educación

Bachelor's degree in cybersecurity or related field

Herramientas

Entra ID

Defender

Microsoft security tooling

Descripción del empleo

Location: Newtown, PA or Houston, TX

Reports to: Vice President of Information Technology

SkyVest Renewables

SkyVest is a renewable power generation platform backed by ArcLight Capital Partners (“ArcLight”). Through affiliates of ArcLight, SkyVest acquires, operates and optimizes operating utility-scale wind, solar and BESS assets throughout the U.S. SkyVest strives to maximize the potential of its assets and create enduring value for its customers, communities, employees and investors. ArcLight formed SkyVest with the vision of building a leading, multi-billion-dollar platform for its renewable investments, similar to its Alpha Generation platform for thermal generation assets. Since its launch in July 2024, SkyVest has grown its asset portfolio to nearly 1 GW, comprised of wind and solar assets in PJM, ERCOT, CAISO and MISO.

About ArcLight Capital Partners

ArcLight is a leading private equity firm focused on energy and infrastructure, founded in 2001. With deep sector expertise, ArcLight has invested in more than 65 gigawatts of power generation and over 47,000 miles of transmission and distribution infrastructure, representing approximately $80 billion in total enterprise value. The firm is known for its operationally driven investment approach and maintains a large internal team alongside a network of over 2,000 asset management professionals. ArcLight has a strong track record in renewables and energy transition assets, including solar, battery storage, hydroelectric, and natural gas infrastructure.

About This Position

SkyVest is building out a best-in-class asset management platform to manage and maximize the value of our asset portfolio. We are seeking a motivated, detail-oriented individual to join the team as a Manager, Cybersecurity. This role will own the end-to-end enterprise cybersecurity program. This hands-on role works closely with the IT Infrastructure & Network Manager, who owns the underlying infrastructure and networking those controls run on, and is expected to actively support the initial build-out of that infrastructure alongside them, not just operate the security layer once it exists.

This role reports to the Vice President, Information Technology.

Key Responsibilities

Cybersecurity Program

• Own the enterprise cybersecurity program end to end, including identity (IAM, PAM, MFA), endpoint (EDR), detection and response (SIEM, SOAR, incident response), email/web/DNS security, DLP, and vulnerability management.
• Design enterprise security architecture and the Zero Trust roadmap and establish security policies and standards.
• Lead risk assessments, security audits, penetration testing, and remediation, including third party assessments; build cyber resilience and incident recovery capabilities.
• Maintain alignment with the NIST Cybersecurity Framework, CIS Controls, and ISO 27001, and lead any future SOC 2 or similar attestation effort.

Managed Security Services & OT/ICS Platform Governance

• Own the relationship with SkyVest’s managed security services provider, setting scope, reviewing findings, and holding the provider accountable for 24/7 monitoring, SIEM/SOAR administration, and EDR operations across the corporate IT environment.
• Select, deploy, and own an OT/ICS network monitoring platform (Claroty, Dragos, Nozomi, or similar) to provide passive asset inventory, vulnerability visibility, and threat detection across SCADA, ICs, and PLC environments at SkyVest’s generation sites; standard corporate SIEM/SOAR/EDR tooling does not see these devices, so this platform is what actually closes that gap rather than a contract assumption.
• Route the OT platform’s alerts into the same incident response process used for corporate IT, whether triaged internally or by the managed security services provider, so an OT event is never a silent alert nobody owns.
• Where full OT/ICS coverage is not yet deployed across all sites, track the rollout and report remaining gaps to leadership as a named, phased risk rather than an assumed one.
• Partner with the IT Infrastructure & Network Manager and site teams on OT network segmentation, industrial firewalls, and secure OT-to-IT connectivity, including remote access for field technicians and vendors.

Support for IT Infrastructure Build-Out

• Actively support the IT Infrastructure & Network Manager during the initial infrastructure build-out (identity, network, endpoint, and cloud foundations), embedding security requirements into the design rather than reviewing it after the fact.
• Help stand up baseline security controls (MFA, endpoint baselines, logging pipelines) as part of the same build-out effort, ahead of handing steady-state operation of them to the managed security services provider.

Client Management

• Develop the enterprise cybersecurity roadmap and present risk posture to leadership.
• Manage security tooling and managed services vendors and related budget.
• Mentor technical staff on security best practices and support M&A due diligence and integration activities.

Qualifications And Skills

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent practical experience.
• 5+ years of progressive cybersecurity experience including renewable OT environment, including program or team leadership.
• Strong expertise in core security technologies (IAM/MFA, EDR, SIEM, vulnerability management) and Zero Trust principles.
• Experience with Microsoft security tooling: Entra ID, Defender, and related enterprise technologies.
• Excellent communication, documentation, and vendor management skills.
• Comfort selecting, deploying, and managing a security platform through a vendor, without requiring prior hands-on OT/ICS engineering experience personally.

Preferred Background

• Experience in renewable energy, utilities, power generation, or critical infrastructure.
• Direct exposure to an OT/ICS network monitoring platform such as Claroty, Dragos, or Nozomi, as a user, evaluator, or program owner.
• Familiarity with IEC 62443, NERC CIP, and OT/ICS security concepts.
• Relevant certification: CISSP, CISM, or GIAC GICSP (or comparable OT/ICS security certification)

Additional Role Information

• Mostly sedentary work; using standard office equipment including: a computer, keyboard, and telephone
• Position is based in either Houston, TX or Newtown, PA
• Position requires 10-15% travel to other SkyVest and ArcLight offices, as well as to generation assets
• Must be legally authorized to work in the U.S. without that the need for current sponsorship by the Company

Total Rewards

SkyVest offers a total rewards package to attract and retain top talent in the utility-scale renewable industry. The package includes: competitive compensation that is commensurate with experience; annual bonus target tied to individual and company performance; cost-effective healthcare plans, allowing employees to choose a medical plan that fits their personal needs; 401(k) plan with an employer match that vests immediately; and flexible working environment and schedule.

SkyVest is committed to equal employment opportunity and does not base employment decisions on race, color, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation, and related medical conditions), gender identity or expression, sexual orientation, marital status, protected veteran or military status, disability, protected medical condition, genetic information, or any other characteristics protected by applicable federal, state, or local laws.