Cyber Security Program Manager

Job Number: 1164

External Description:

Requisition ID: 66897

Job Function/Category: Information Technology

Employment Type: Exempt Full Time

This is an exciting time to be joining PSEG. Our commitments, which include safety, integrity, customer focus, and diversity & inclusion, are the fabric of our culture and help drive the success of our business. We are fortunate to have an outstanding workforce of diverse and highly skilled talent who move us forward in our operational excellence journey. PSEG has more than 12,000 employees who are dedicated to the communities we serve and embody our vision: People providing Safe, Reliable, Economic and Greener Energy.

Job Summary

T he reporting location for this position (Nuclear Cyber Security Program Manager) will be Hancocks Bridge, NJ.

This position is an experienced, senior level, hands-on technical lead for the PSEG Nuclear cyber security program, performing IT security functions and maintaining systems, while providing technical guidance to the team. Manages information security technologies such as antivirus, IDS/IPS, SIEM, endpoint detection & response, DLP, data encryption, proxies, and network access control, as well as security policies and procedures, and incident response. Provides technical expertise and support to clients, IT management and staff in cybersecurity threat risk assessments, development, testing and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.

Job Responsibilities

• Leads and manages the PSEG Nuclear cyber security program
• Lead the Cyber Security Assessment Team
• Collaborate with the relevant IT teams to ensure the Ongoing Monitoring and Assessment activities listed in the Cyber Security Plan are completed within the required periodicity
• Maintain the Corrective Action Program
• Participate in periodic audits of the Nuclear Cyber Security program
• Support NRC inspections
• Defines, designs, and implements strategies to protect against emerging threats using security tools
• Function as a single point of contact for issues related to cyber security;
• Provide oversight and direction on issues regarding nuclear plant cyber security;
• Initiate and coordinate Cyber Security Incident Response Team (CSIRT) functions as required;
• Coordinate with NRC, DHS, DOE, and FBI as required during cyber security events;
• Collaborate with relevant teams to ensure plant modifications are properly screened and assessed and for ensuring applicable cyber security controls are implemented prior to putting configuration changes into service

Job Specific Qualifications

Required:

• Bachelor's degree in Computer Science or Information Systems or Cyber Security or Engineering or related technical field
• 8 or more years of experience in information security or related IT experience
• Hands-on technical lead performing IT security functions and maintaining systems, while providing technical guidance to the team.
• Manages information security technologies such as antivirus, IDS/IPS, SIEM, endpoint detection & response, DLP, data encryption, proxies, and network access control, as well as security policies and procedures, and incident response.
• Provides technical expertise and support to clients, IT management and staff in cybersecurity threat risk assessments, development, testing and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.
• Strong incident response and threat analysis experience, including SIEM technology. Proficient in defining processes and procedures for incident response.
• Follows cyber security news and alerts, understands complex attack vectors and risks, and identifies and evaluates emergent cyber security threats and vulnerabilities. Recommends appropriate corrective actions for information security incidents and provides risk mitigation recommendations to management and team.
• Experience with cloud computing and can implement strong security to protect cloud first environment.
• Designs process flows to be implemented in security automation tools to automatically respond to threats quickly and effectively.
• Reviews complex architecture design diagrams and documents for new technologies and changes to existing technologies to determine risks and provide recommendations and mitigations.
• Works independently with little or no supervision.
• Excellent oral and written communication skills.
• Excellent leadership, technical teamwork, and interpersonal skills.
• Willing to work in strong team environment, constantly teaching and learning from other team members.
• Ability to foster working relationships with the team, IT Management and Client departments.
• Ability to explain technical concepts to the business users in the context of business requirements.
• Technical experience includes: information / data / network / computer security design, administration and/or assessment.
• Broad knowledge of information systems including Windows and Linux OS security, network security, systems development, communication networks, security software/hardware and operating systems.
• Experience with key information security technologies such as SIEM, firewalls, intrusion detection/prevention systems, vulnerability assessment, encryption, identity and access control systems, anti-malware, and security event analysis.
• Leadership, planning and organizing, results orientation, technical/professional knowledge.
• Excellent interpersonal, organizational, managerial, financial management and leadership skills.
• Communicates effectively with both technical and non-technical individuals.
• Maintains a solid working knowledge of Information Security principles and practices.
• Must possess a valid U. S. driver's license and a safe driving record
• Please Note the Following:
• Approximately 5% Travel required
• NERC CIP position, requires NERC CIP background investigation prior to start

Desired:

• Five or more years' experience in 10 CFR 73.54 and NEI 08-09 Criteria
• (ISC)2 Certified Information Systems Security Professional (CISSP), SANS Global Industrial Cyber Security Professional (GICSP), or equivalent

Minimum Years of Experience

8 years of experience

Education

Bachelors

Disclaimer

Certain positions at the Company may require you to have access to Part 810-Controlled Information. Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.

As an employee of PSE&G or PSEG Long Island, you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations.

This site ( http://www.pseg.com ) is strictly for candidates who are not currently PSEG employees. PSEG employees must apply for jobs internally through empower which can be accessed through the mypseg homepage by clicking on the employee center tab, then under the empower header, choose careers.

Business needs may cause PSEG to cancel or delay filling position at any time during the selection process.

Certain positions at the Company may require you to have access to Part 810-Controlled Information. Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.

Public Service Enterprise Group (PSEG) is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legal protected characteristic. Legally protected characteristics included, race, color, religion, national origin, sex, age, marital status, sexual orientation, disability, or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals.

Need to request an accommodation?

If you have a disability and need assistance submitting your resume, applying for a position or registering for a test, please call 973-430-3845. Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.

Nearest Major Market: Newark
Nearest Secondary Market: New York City
Job Segment: Nuclear, Engineer, Information Systems, Computer Science, Nuclear Engineering, Energy, Engineering, Technology

Job Number: 66897

Community / Marketing Title: Cyber Security Program Manager

Location_formattedLocationLong: Newark, New Jersey US