Senior Manager, Cybersecurity

Apex Clean Energy; Charlottesville (VA); Sur place; USD 140 000 - 210 000; Plein temps

Avantages offerts par ce poste

Medical and dental

401(k) matching

Parking/commuting benefits

Résumé du poste

Apex Clean Energy is seeking a Senior Manager, Cybersecurity to own and mature the company’s cybersecurity program across IT, cloud, and OT environments. You will set standards, review major technology changes, and lead responses to incidents with ITS engineers and operations staff.

The role reports to the Director of ITS and involves overseeing a 24/7 managed security partner, with broad access to leadership and opportunities to shape security across the energy platform.

Qualifications

• 8+ years of progressively responsible cybersecurity experience.
• Track record maturing security programs through standards and risk.
• Hands-on with SIEM/EDR, firewalls, IAM/PAM, and cloud security tooling.
• Experience leading incident response and making time-sensitive decisions.

Responsabilités

• Lead and evolve Apex's cybersecurity strategy, roadmap, policies, and standards.
• Run the cybersecurity risk program, including risk register and vendor assessments.
• Report security posture and program performance to leadership.

Connaissances

Cybersecurity leadership

Security strategy

Governance & risk

Incident response

Outils

SIEM

EDR

Firewalls

IAM/PAM

Cloud security tooling

Description du poste

Apex Clean Energy was founded with a singular focus: to accelerate the shift to clean energy. Through origination, construction, and operation of utility-scale wind, solar, and storage facilities, distributed energy resources, and green fuel technologies, Apex is expanding the renewable frontier across North America. Our mission-driven team of nearly 400 professionals uses a data-focused approach and an unrivaled portfolio of projects to create solutions for the world’s most innovative and forward-thinking customers. For more information about how Apex is building the energy company of the future, visit apexcleanenergy.com .

Apex strives to excel in every phase of project realization, from origination and financing to construction and asset management. Our mission-driven team seeks determined, resolute individuals who strive to innovate and go above the call of duty, and who will relentlessly do their part to help accelerate the shift to America’s clean energy future.

Job Description

The Senior Manager, Cybersecurity owns Apex's cybersecurity program across corporate IT, cloud, and operational technology environments, reporting to the Director of Integrated Technology Solutions (ITS).

This is a senior individual-contributor role with no direct reports and real authority. You'll set security standards, review significant technology changes, direct security work carried out by ITS engineers and operations staff, and lead the response when incidents occur. You can enforce security standards and take immediate protective action against an active threat, while business leaders own decisions to accept material residual risk.

This role leads Apex's cybersecurity program at a point where the direction is set, and the foundations are in place. The work now is to mature it: turning strategy into durable standards, sharper risk decisions, and a program that keeps pace as the business and the threat landscape change. You'll have broad scope, direct access to leadership, and a real hand in protecting infrastructure that supports the energy transition.

The role is supported by ITS infrastructure, systems engineering, and operations teams, and by a 24/7 managed security partner that provides monitoring and initial response. You'll be the senior escalation point when incidents occur, including after hours.

• Hours: Full-time
• Type: Exempt
• Department:Integrated Technology Solutions
• Travel: 10%

Primary Responsibilities:

• Lead and evolve Apex's cybersecurity strategy, roadmap, policies, and standards in partnership with the Director of ITS
• Run the cybersecurity risk program, including the risk register, assessments of systems, vendors, and integrations, and security review of significant technology initiatives before implementation
• Report security posture, material risk, and program performance to leadership

Security Operations

• Oversee vulnerability management, endpoint protection, SIEM/SOC monitoring, network and firewall governance, and cloud security posture
• Own identity and access standards, including IAM, PAM, and account lifecycle
• Manage relationships with managed security, SOC, and incident response partners, including performance and escalation
• Direct ITS technical staff on security work, while staying hands‑on enough to investigate threats and validate controls yourself

OT & NERC CIP

• Define cybersecurity requirements for the IT/OT boundary, including remote and vendor access, in partnership with SCADA/OT leadership
• Integrate NERC CIP cybersecurity requirements into Apex's overall security framework
• Work with SCADA/OT leadership to extend incident response, monitoring, vulnerability management, and vendor risk programs to OT, including protection of critical backups
• Serve as incident commander for cybersecurity events, coordinating with Legal, Communications, leadership, insurers, forensics partners, regulators, and law enforcement
• Maintain incident response plans and playbooks, and run regular tabletop exercises, including joint exercises with SCADA/OT
• Own IT disaster recovery and cyber recovery planning and testing, and coordinate enterprise business continuity

Enabling the Business

• Set security requirements for AI, SaaS, APIs, automation, data handling, and secrets management so teams can adopt new technology responsibly
• Lead security awareness, phishing simulation, and privileged‑user training, and build security capability across ITS

Qualifications

To succeed as the Senior Manager, Cybersecurity at Apex Clean Energy, you’ll need to excel within the following criteria:

Required Qualifications

• 8+ years of progressively responsible experience in cybersecurity, including leading security programs or major initiatives across teams without direct reporting authority
• A track record of maturing an established security program through standards, risk management, and technical controls
• Hands‑on experience with SIEM, EDR, firewalls, vulnerability management, IAM/PAM, and cloud security tooling, including personally investigating incidents
• Experience leading incident response and making time‑sensitive decisions during active events
• Ability to separate technical findings from material business risk and explain the difference to senior leadership
• Sound judgment balancing security, operations, business priorities, and regulatory obligations

Preferred Qualifications

• CISSP, CISM, GICSP, GIAC, or comparable certification
• Working knowledge of NERC CIP as it applies to generation assets
• Experience in energy, utilities, or other critical infrastructure, including OT, ICs, or SCADA environments (IEC 62443 and NIST SP 800‑82 familiarity a plus)
• Experience managing MSSPs, SOC providers, or incident response firms
• Experience assessing security risk in AI, SaaS, and automation adoption

At Apex Clean Energy, we believe that diverse perspectives drive innovation and success. We are committed to creating an inclusive environment where all individuals feel valued and empowered. We encourage applicants from all backgrounds to apply, even if you do not meet every qualification listed in the job description. Your unique experiences and skills could be the perfect fit for our team!

If you are passionate about renewable energy and want to join usin accelerating the shift to clean energy, we would love to hear from you. Please submit your application for our team’s review!

Additional Information

Works in both an indoor office environment and an outdoor environment, occasionally at night which may besubject to inclement weather.Extended hours may be required to complete scheduled repairs.

How You’ll Grow

At Apex Clean Energy, our professional development plans focus on helping people at every level of their career to identify and use their strengths to do their best work every day. From entry‑level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to help sharpen skills in addition to hands‑on experience in the dynamic, fast‑paced renewable energy industry. From on‑the‑job learning experiences to a robust multi‑week onboarding experience to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

What Apex Can Offer You

At Apex Clean Energy, we know that great people make a great company. We value our people and offer employees a broad, best‑in‑class range of benefits.

• A mission‑driven, energetic environment that supports and encourages our people to do their best work every day.
• A respect for and celebration of individuality, differences, and uniqueness
• Collaborative and driven professional workforce committed to supporting your ideas and feedback and accelerating your potential
• Ongoing support and guidance such as on‑the‑job learning, hands‑on experience, and mentorship
• Training, strategies, and tools to support your personal and professional growth
• Team atmosphere of diverse professionals committed to making an impact as an organization
• Opportunities to volunteer and give back to our local communities
• Exceptional benefits such as medical and dental; 401(k) with corporate match
• Base and bonus commensurate with experience
• Benefits Offered: comprehensive high‑deductible health plans, dental and vision insurance plans, short‑term and long‑term disability, group life insurance, 401(k) corporate matching, flexible spending arrangements, company paid parking and cell phone, fitness and wellness corporate discounts

Apex Clean Energy, Inc.is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.