Manager, OT & Security

Cyberjobs; Durham, Northern (NC, KY); Hybrid; USD 140,000 - 230,000; Full time

Benefits offered by this job

PTO 15 days

401(k) Match

Medical, dental, vision

Wellness and family planning stipends

Parental leave

Tuition reimbursement

Phone bill reimbursement

Company swag

Job summary

Cypress Creek Energy is seeking an experienced Manager, OT & Security to own the OT environment and security program across our generation and storage assets in Durham, NC. You will set strategy, lead the security team, and partner with IT to align operations with risk-based controls.

In this leadership role, you will drive governance, risk, and incident response, manage a key security budget, and ensure reliable, secure OT systems while mentoring a growing team in a fast-changing energy

Qualifications

• 8–10+ years in OT and/or cybersecurity, incl. 5+ years leading teams.
• Hands-on OT systems knowledge: SCADA, historians, control networks.
• Proven ownership of a security/technology program: strategy, governance, risk, operations.
• Strong OT security framework knowledge: IEC 62443, NIST SP 800-82.
• Familiarity with NERC CIP obligations for generation/storage assets.
• Proven ability to build and lead teams and manage budgets.
• Bachelor’s degree in cybersecurity/engineering/CS/IT or equivalent experience.
• Embrace Cypress Creek Energy mission and values.

Responsibilities

• Lead the OT Security Program end to end—from establishment to sustained operation.
• Set strategy for OT monitoring/controls (SCADA, site controllers, HMIs) with reliability as priority.
• Oversee OT platform lifecycle: deployment, maintenance, decommissioning with engineers/ops.
• Set and execute security strategy across OT in coordination with IT and tech org.
• Lead OT security engineering/analytics teams and mentorship.
• Govern risk and compliance: policy, risk register, exceptions, controls.
• Coordinate with NERC CIP Compliance to stay aligned with regs.
• Direct MSSP relationship and ensure security outcomes.
• Serve as incident commander for significant OT/security incidents.
• Own security budget and tooling roadmap; report metrics to leadership.

Skills

OT security leadership

OT/ICS expertise

NERC CIP knowledge

IEC 62443 knowledge

NIST CSF familiarity

Budget & vendor mgmt

Executive communication

Education

Bachelor’s degree in cybersecurity, engineering, CS, IT, or related field

Job description

The Company

The energy industry is entering one of the most significant periods of growth and transformation in its history. Meeting the nation’s growing demand for reliable electricity will requirenew ideas, new infrastructure, and talented people committed to building for the future.

At Cypress Creek Energy,we’remeeting that challenge by developing andoperatingthe energy infrastructure needed to power communities, support economic opportunity, and strengthen resilience. We believe our responsibility extends beyond the grid and that how we build matters just as much as what we build.

That same commitment extends to our employees. We invest in professional growth, encourage collaboration across teams, and provide opportunities to take ownership, expand yourexpertise, and advance your career. Our culture is grounded in safety, accountability, respect, and a shared commitment to deliver results. Join us and help meet one of the most important energy challenges of our time while building a rewarding career.

Overview

Cypress Creek Solutions operates and maintains a geographically distributed fleet of utility-scale solar and energy storage assets and depends on its operational technology (OT) — the control, monitoring, and communications systems that run the fleet — and on securing those systems and the company’s information. As we scale, we are investing in the leadership to own operational technology and its security, and to build the program and team that will run it. This is a leadership role with ownership of both OT operations and OT and enterprise security.

As Manager, OT & Security, you are the program lead for operational technology and security at Cypress Creek Solutions — accountable both for the OT systems, networks, and infrastructure that monitor and control our generation and storage fleet, and for the OT Security Program and broader cybersecurity posture that protect them. You set strategy and standards, mature the function from the ground up, lead and grow the team, own the relationship with our managed security provider, and answer reliability, availability, and security outcomes to leadership. You keep safety and availability first, balance operational and security demands, and translate risk into clear decisions.

Operational technology at Cypress Creek Solutions runs the generation and storage fleet, and its security extends across the IT/OT boundary into enterprise systems. This role owns the OT environment and its security directly, partners with the technology organization on the IT side, and holds our managed security provider accountable for contracted monitoring and response. The goal is OT that is both reliable and secure — one coherent posture across the whole environment.

Responsibilities

• Serve as the program lead and accountable owner of the OT Security Program end to end — its charter, policy, standards, and supporting plans that protect our battery storage, SCADA, and generation environments — and drive it from establishment to sustained operation.
• Own the strategy, architecture, and standards for the operational technology that monitors and controls the fleet — SCADA, site controllers, historians, HMIs, and field communications — with reliability and availability as first-order objectives.
• Steward the OT platform and infrastructure lifecycle, from selection and commissioning through maintenance, upgrade, and decommissioning, coordinating with engineering, operations, and the monitoring team.
• Set and execute security strategy across OT and, in coordination with the technology organization, the company’s broader IT security posture.
• Lead, hire, and mentor the security team — including OT security engineering and analysis — and set objectives as the function scales.
• Own governance, risk, and compliance: security policy, risk assessments and the risk register, exceptions, and control assurance.
• Oversee NERC CIP low impact obligations for in-scope assets, coordinating with NERC CIP Compliance so the security program and regulatory compliance stay aligned.
• Direct the managed security service provider relationship — services, SLAs, escalation, and performance — while retaining accountability for security outcomes.
• Serve as incident commander for significant OT and security incidents, coordinating technical response, executive communication, and post-incident improvement.
• Own the security budget and tooling roadmap, prioritizing investment against risk.
• Report security posture, key risks, and program metrics to the VP and executive leadership.

Education & Experience Required

• 8 -10+ years in operational technology and/or cybersecurity, including 5+ years leading OT, security, or technology teams or programs.
• Hands-on understanding of OT systems and infrastructure — SCADA, control systems, historians, and OT networks — and what it takes to keep them reliable and available.
• Demonstrated ownership of a security or technology program — strategy, governance, risk, and operations — ideally including OT/ICS environments.
• A strong grasp of OT security frameworks (IEC 62443, NIST SP 800-82) and the NIST Cybersecurity Framework, plus the IT/OT boundary.
• Familiarity with NERC CIP obligations relevant to generation and storage assets (low-high impact).
• A proven ability to build and lead teams and to manage service providers and budgets.
• The judgment to weigh security against operational safety and availability, and to communicate risk credibly to executives.
• Bachelor’s degree in cybersecurity, engineering, computer science, information technology, or a related field — or equivalent professional experience.
• Embrace and live by the mission and values of Cypress Creek Energy

Preferred Qualifications

• CISSP, CISM, GICSP, GSLC, or equivalent senior security certification.
• Experience running OT operations or platform teams in generation, storage, or utilities.
• Experience in energy, utilities, or critical infrastructure.
• Experience standing up or maturing an OT security program from an early stage.
• Experience overseeing a managed security service provider and OT-appropriate security tooling.

Location:

The preferred location for this role is one of our office locations: Durham, NC. Our team operates on a hybrid schedule, with in-office schedule of three days per week.

Benefits:

• 15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays.
• 401(k) Match
• Comprehensive package including medical, dental, vision and health insurance
• Wellness stipend, family planning stipend, and generous parental leave
• Tuition Reimbursement
• Phone Bill Reimbursement
• Company Swag

Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply.