Manager, IT Security

Fervo Energy; Houston (TX); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision

Life insurance

Disability coverage

401(k) with company match

Paid time off & parental leave

Employee stock purchase program

Lifestyle Spending Account

Dependent care FSA

Job summary

Fervo Energy is seeking an IT Security Manager to lead cybersecurity strategy and protect corporate assets, cloud, and data. The role partners with OT security and requires strong leadership, risk assessment, and regulatory compliance.

You will guide security architecture, tooling, and incident response while communicating risk to senior leadership and driving a culture of security across the organization.

Qualifications

• 10+ years of cybersecurity experience with 3+ years in leadership.
• Strong knowledge of NIST/CIS controls and risk reduction.
• Hands-on with firewalls, EPP, IDS/IPS, SIEM, and DLP.
• Experience securing Microsoft 365 and Azure environments.
• Excellent communication with non-technical partners.

Responsibilities

• Develop and execute a comprehensive cybersecurity strategy.
• Lead a team of security professionals and mentor staff.
• Oversee security operations including tools and policies.
• Coordinate incident response and disaster recovery planning.
• Ensure SOX ITGC and ISO 27001 compliance; report to leadership.
• Collaborate IT/OT to align security with plant systems.

Skills

Cybersecurity

Leadership

Threat modeling

Vulnerability management

Security operations

Incident response

Communication skills

Zero Trust

Microsoft 365 & Azure security

Education

Bachelor’s degree or equivalent

Tools

CrowdStrike

Microsoft Defender

Microsoft Sentinel

Rapid7

DLP solutions

Microsoft Entra ID

SSO/MFA

Azure security

Zero Trust

Job description

Fervo Energy (NASDAQ: FRVO) is a modern power company developing next-generation geothermal resources to meet the growing demand for affordable, reliable, 24/7 carbon-free energy. Our mission is to transform geothermal into America’s most dependable and affordable source of clean, around-the-clock power. By combining innovations in horizontal drilling, fiber-optic sensing, and advanced reservoir engineering, Fervo has developed a repeatable approach to building utility-scale enhanced geothermal systems. Our flagship Cape Station development in Utah is planned to deliver 500 MW of firm, carbon-free power, and we are advancing a development pipeline of more than 50 GW. Join us and work alongside world-class engineers, geoscientists, operators, project builders, and business leaders working to make geothermal a cornerstone of a more reliable, affordable, and sustainable energy future.

Position Description

The IT Security Manager will lead our efforts to protect Fervo’s corporate information assets, cloud environment, and data. This role will own the development and execution of our cybersecurity strategy, manage threat detection and response, and ensure compliance with the regulatory requirements that apply to our business. We are looking for someone who combines deep technical expertise with strong leadership and strategic vision to safeguard the organization against evolving cyber threats. This position will report to the Senior Director of Information Technology & Cybersecurity.

The role will be our subject matter expert (SME) for IT security posture, selecting, implementing, and evaluating the security solutions that protect our infrastructure, systems, and data and support our digital journey. It will partner closely with our operational technology (OT) cybersecurity function, which is responsible for plant and field control systems, at the points where corporate IT and plant systems meet. Beyond deep technical skills, the ideal candidate brings excellent communication and stakeholder-facing skills to build a culture of security awareness and compliance across the organization.

Responsibilities

Strategic Leadership: Develop and implement a comprehensive cybersecurity strategy aligned with organizational goals and industry best practices, with a focus on our Microsoft 365 and Azure environment. Conduct regular risk assessments and develop mitigation plans to address vulnerabilities. Stay current on emerging threats, technologies, and regulatory requirements, recommend innovative solutions, and implement improvements to security, reliability, and system performance.

Team Leadership: Lead and mentor a team of cybersecurity professionals, fostering skill development and collaboration while ensuring effective monitoring, threat analysis, and incident response. Allocate resources effectively to support operational and project-based initiatives.

Security Operations: Oversee the configuration, deployment, and maintenance of security tools, including firewalls, endpoint protection (e.g., Microsoft Defender, CrowdStrike), intrusion detection/prevention systems (IDS/IPS), and SIEM solutions (e.g., Microsoft Sentinel, Rapid7). Establish and enforce security policies, procedures, and controls across the organization.

Incident Response and Recovery: Develop and manage an incident response plan, including coordination of responses to security breaches or attacks. Collaborate with IT and business units to ensure effective disaster recovery and business continuity planning. Conduct post-incident analyses to identify lessons learned and enhance preventive measures.

Compliance and Reporting: Ensure compliance with applicable laws, regulations, and standards such as SOX IT general controls and ISO 27001. Provide regular reports to senior leadership on the state of cybersecurity, including risk assessments and mitigation efforts.

IT/OT Integration: Partner with the OT cybersecurity function on the integration points between corporate IT and plant systems, ensuring IT-side security controls, risk, performance, and total cost of ownership are addressed.

Systems Architecture: Provide architectural assessments, strategies, and roadmaps for systems selection and implementation. Define technical evaluation criteria for product and technology selection and determine technical approaches to ensure solutions result in a coherent systems design. Assess the systems architecture currently in place and provide improvement recommendations. Maintain security documentation and licensing.

Budgeting and Vendor Management: Manage the cybersecurity budget, including hardware, software, and service agreements. Evaluate and negotiate contracts with vendors, ensuring cost-effectiveness and alignment with business requirements.

Customer Focus and Security Awareness: Build a service-oriented security team that delivers excellent, responsive support and treats helping users as part of how we operate. Conduct security awareness training programs to educate employees on best practices and emerging threats.

Qualifications

Required

10+ years of relevant experience in cybersecurity, with 3+ years in a leadership capacity

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience

Deep understanding of security frameworks (e.g., NIST Cybersecurity Framework, CIS Controls)

Expertise in threat modeling and vulnerability management

Hands‑on experience with security tools such as firewalls, endpoint protection (e.g., CrowdStrike), IDS/IPS, SIEM (e.g., Microsoft Sentinel, Rapid7), and DLP solutions

Knowledge of encryption technologies, authentication protocols, and identity management solutions (e.g., Microsoft Entra ID, SSO, MFA)

Hands‑on experience securing Microsoft 365 and Azure environments, including identity, endpoint, and cloud security controls (e.g., Conditional Access, Microsoft Purview, Defender for Cloud), with a Zero Trust approach

Proficiency in incident response methodologies

Proven track record of leading large‑scale, complex IT and security initiatives

Strong written and verbal communication skills with ability to effectively communicate and present security risk concepts to non‑technical stakeholders and cross‑functional teams

Preferred

Experience with penetration testing and forensic investigation tools

Experience with automation and scripting (e.g., Python, PowerShell) to streamline security operations

Familiarity with OT and industrial control system (ICS) security concepts and NERC CIP, and experience working alongside an OT security team

Certifications: CISSP, CISM, CISA, CEH, or GIAC

Location

Fervo Energy is headquartered in Houston, TX, with satellite offices in the Bay Area, CA; Golden, CO; and Reno, NV. This is a hybrid position based in our Houston office, with three or more days per week in the office. Some travel is required for this position (approx. 20%).

• Fervo offers a comprehensive benefits package designed to support your health, financial well‑being, and life outside of work. Benefits for eligible employees include:
• Medical, dental, and vision plan options
• Employer‑paid basic life insurance and short‑term and long‑term disability coverage
• A 401(k) plan with a dollar‑for‑dollar company match
• Flexible paid time off and paid parental leave
• Family‑building, fertility, hormonal health, pregnancy, postpartum, and parenting support through Carrot
• A dependent care FSA for eligible child and elder care expenses
• An annual Lifestyle Spending Account for eligible wellness expenses, including fitness, financial planning, pet insurance, and pet care
• Employee ownership opportunities through Fervo’s Employee Stock Purchase Program, as well as stock option grants and bonus opportunities for eligible roles

Benefits and programs are subject to eligibility requirements and may change.

Our Workplace

Fervo Energy highly values having employees work in the office to foster collaboration and strengthen our company culture. This role follows a hybrid schedule, with team members expected to work in the office three days per week. Fervo considers this in‑office schedule an essential function of the role. Your recruiter can share more information about the schedule.

Equal Opportunity Employer

Fervo Energy is an Equal Opportunity Employer and does not discriminate on the basis of race, color, creed, gender, religion, marital status, registered domestic partner status, age, national origin, ancestry, physical or mental disability, medical condition, sex, genetic information, sexual orientation, military or veteran status, or any other consideration made unlawful by federal, state, or local law. Fervo also prohibits discrimination based on the perception that an individual has any of these characteristics or is associated with a person who has or is perceived as having any of these characteristics.

Voluntary Self‑Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Fervo Energy’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.