Manager, OT & Security

Cypress Creek Energy; Durham (NC); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) Match

Medical, dental, vision

Hybrid work schedule

Job summary

Cypress Creek Energy in Durham, NC, is seeking a Manager, OT & Security to lead the operational technology and security program across our generation and storage fleet. You will set strategy, drive security standards, and manage the OT security team and managed service provider, ensuring reliability and protection of critical assets.

The role requires 8–10+ years in OT/cybersecurity with 5+ years in leadership, strong governance, and experience with OT systems and security frameworks.

Qualifications

• 8-10+ years in OT and/or cybersecurity with 5+ years leading OT/security teams.
• Hands-on understanding of OT systems (SCADA, historians, OT networks).
• Proven ownership of a security/tech program including governance and operations.
• Strong grasp of OT security frameworks and IT/OT boundary.
• Familiarity with NERC CIP obligations for generation/storage assets.
• The ability to build and lead teams and manage budgets.

Responsibilities

• Lead the OT Security Program end-to-end, from charter to sustained operation.
• Define strategy, architecture, and standards for OT monitoring and control.
• Oversee lifecycle of OT platform and infrastructure with cross-team coordination.
• Set security strategy across OT and align with IT security posture.
• Lead, hire, and mentor OT security engineering and analysis teams.
• Own governance, risk, compliance, and exception management.
• Coordinate with NERC CIP compliance to stay aligned.
• Manage MSSP relationship and ensure security outcomes.
• Serve as incident commander for major OT/security events.
• Oversee security budgeting and tooling roadmap.
• Report posture and risks to VP and executive leadership.

Skills

OT cybersecurity

Team leadership

Budget management

Stakeholder communication

Education

Bachelor’s degree in cybersecurity/engineering/CS/IT

Tools

IEC 62443

NIST SP 800-82

NIST Cybersecurity Framework

NERC CIP

Job description

The Company

The energy industry is entering one of the most significant periods of growth and transformation in its history. Meeting the nation’s growing demand for reliable electricity will require new ideas, new infrastructure, and talented people committed to building for the future.

The Company

The energy industry is entering one of the most significant periods of growth and transformation in its history. Meeting the nation’s growing demand for reliable electricity will require new ideas, new infrastructure, and talented people committed to building for the future.

At Cypress Creek Energy, we’re meeting that challenge by developing and operating the energy infrastructure needed to power communities, support economic opportunity, and strengthen resilience. We believe our responsibility extends beyond the grid and that how we build matters just as much as what we build.

That same commitment extends to our employees. We invest in professional growth, encourage collaboration across teams, and provide opportunities to take ownership, expand your expertise, and advance your career. Our culture is grounded in safety, accountability, respect, and a shared commitment to deliver results. Join us and help meet one of the most important energy challenges of our time while building a rewarding career.

Overview

Cypress Creek Solutions operates and maintains a geographically distributed fleet of utility‑scale solar and energy storage assets and depends on its operational technology (OT) — the control, monitoring, and communications systems that run the fleet — and on securing those systems and the company’s information. As we scale, we are investing in the leadership to own operational technology and its security, and to build the program and team that will run it. This is a leadership role with ownership of both OT operations and OT and enterprise security.

As Manager, OT & Security, you are the program lead for operational technology and security at Cypress Creek Solutions — accountable both for the OT systems, networks, and infrastructure that monitor and control our generation and storage fleet, and for the OT Security Program and broader cybersecurity posture that protect them. You set strategy and standards, mature the function from the ground up, lead and grow the team, own the relationship with our managed security provider, and answer reliability, availability, and security outcomes to leadership. You keep safety and availability first, balance operational and security demands, and translate risk into clear decisions.

Operational technology at Cypress Creek Solutions runs the generation and storage fleet, and its security extends across the IT/OT boundary into enterprise systems. This role owns the OT environment and its security directly, partners with the technology organization on the IT side, and holds our managed security provider accountable for contracted monitoring and response. The goal is OT that is both reliable and secure — one coherent posture across the whole environment.

Responsibilities

• Serve as the program lead and accountable owner of the OT Security Program end to end — its charter, policy, standards, and supporting plans that protect our battery storage, SCADA, and generation environments — and drive it from establishment to sustained operation.
• Own the strategy, architecture, and standards for the operational technology that monitors and controls the fleet — SCADA, site controllers, historians, HMIs, and field communications — with reliability and availability as first-order objectives.
• Steward the OT platform and infrastructure lifecycle, from selection and commissioning through maintenance, upgrade, and decommissioning, coordinating with engineering, operations, and the monitoring team.
• Set and execute security strategy across OT and, in coordination with the technology organization, the company’s broader IT security posture.
• Lead, hire, and mentor the security team — including OT security engineering and analysis — and set objectives as the function scales.
• Own governance, risk, and compliance: security policy, risk assessments and the risk register, exceptions, and control assurance.
• Oversee NERC CIP low impact obligations for in-scope assets, coordinating with NERC CIP Compliance so the security program and regulatory compliance stay aligned.
• Direct the managed security service provider relationship — services, SLAs, escalation, and performance — while retaining accountability for security outcomes.
• Serve as incident commander for significant OT and security incidents, coordinating technical response, executive communication, and post-incident improvement.
• Own the security budget and tooling roadmap, prioritizing investment against risk.
• Report security posture, key risks, and program metrics to the VP and executive leadership.

Education & Experience Required

• 8 -10+ years in operational technology and/or cybersecurity, including 5+ years leading OT, security, or technology teams or programs.
• Hands‑on understanding of OT systems and infrastructure — SCADA, control systems, historians, and OT networks — and what it takes to keep them reliable and available.
• Demonstrated ownership of a security or technology program — strategy, governance, risk, and operations — ideally including OT/ICS environments.
• A strong grasp of OT security frameworks (IEC 62443, NIST SP 800-82) and the NIST Cybersecurity Framework, plus the IT/OT boundary.
• Familiarity with NERC CIP obligations relevant to generation and storage assets (low-high impact).
• A proven ability to build and lead teams and to manage service providers and budgets.
• The judgment to weigh security against operational safety and availability, and to communicate risk credibly to executives.
• Bachelor’s degree in cybersecurity, engineering, computer science, information technology, or a related field — or equivalent professional experience.
• Embrace and live by the mission and values of Cypress Creek Energy

Preferred Qualifications

• CISSP, CISM, GICSP, GSLC, or equivalent senior security certification.
• Experience running OT operations or platform teams in generation, storage, or utilities.
• Experience in energy, utilities, or critical infrastructure.
• Experience standing up or maturing an OT security program from an early stage.
• Experience overseeing a managed security service provider and OT‑appropriate security tooling.

Location

The preferred location for this role is one of our office locations: Durham, NC. Our team operates on a hybrid schedule, with in‑office schedule of three days per week.

Benefits

• 15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays.
• 401(k) Match
• Comprehensive package including medical, dental, vision and health insurance
• Wellness stipend, family planning stipend, and generous parental leave
• Tuition Reimbursement
• Phone Bill Reimbursement
• Company Swag

Equal Opportunity

Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply.