Cybersecurity Practice Lead
- InfiCare Technologies
2 Hours Ago
NA
Yearly
Remote
15-20 Years
Required Skills: Cybersecurity Governance & Strategy, Enterprise Risk Management, Security Program Management, Compliance Management, OT/IT Security Governance, Policy & Standards Development, Vendor Governance, Executive Stakeholder Management, Business Continuity & Disaster Recovery, Security Audit & Assessment Management
Job Description
Cybersecurity Practice Lead – OT & SCADA
- We are seeking an experienced Cybersecurity Practice Lead to drive enterprise cybersecurity strategy, governance, risk management, and compliance initiatives across critical infrastructure and regulated environments. The ideal candidate will provide strategic leadership for cybersecurity programs, align security controls with business objectives, and ensure compliance with industry frameworks and regulatory requirements.
- The role will serve as a trusted advisor to senior leadership, guiding cybersecurity investments, managing risk, and improving organizational resilience across both IT and Operational Technology (OT) environments.
- The ideal candidate is a senior cybersecurity leader who can bridge business objectives, regulatory requirements, and cybersecurity strategy.
- This individual should be comfortable engaging with C-level executives, managing large security programs, and driving cyber resilience initiatives across both IT and OT environments while maintaining a strong governance and risk-focused approach.
Key Responsibilities:
Cybersecurity Strategy & Leadership
- Develop and execute enterprise cybersecurity strategies aligned with business goals.
- Establish and mature cybersecurity governance programs across multiple business units.
- Advise executive leadership on cyber risk, security posture, and strategic investments.
- Lead large-scale cybersecurity transformation initiatives.
Governance, Risk & Compliance (GRC)
- Design and implement risk management frameworks and governance processes.
- Conduct enterprise risk assessments and recommend risk mitigation strategies.
- Develop cybersecurity policies, standards, and control frameworks.
- Ensure compliance with industry and regulatory requirements.
Regulatory & Security Frameworks
- Drive implementation and adherence to:
- NIST Cybersecurity Framework (CSF)
- NIST 800-53
- NIST 800-171
- ISO 27001
- CIS Controls
- GDPR
- NERC CIP (preferred)
OT & Critical Infrastructure Security
- Provide leadership for cybersecurity initiatives across OT and industrial environments.
- Partner with business and operations teams to secure critical infrastructure systems.
- Support cybersecurity assessments for SCADA, Industrial Control Systems (ICS), and Smart Grid environments.
- Develop IT/OT security governance and risk management strategies.
Data Protection & Cloud Governance
- Lead enterprise data protection and security governance initiatives.
- Establish cloud governance programs for public cloud platforms such as Azure and AWS.
- Drive implementation of DLP, IAM, and security monitoring programs.
Security Operations & Resilience
- Oversee vulnerability management, incident response, disaster recovery, and business continuity programs.
- Guide the implementation of security monitoring and threat detection solutions.
- Ensure continuous improvement of organizational cyber resilience.
Program & Vendor Management
- Manage cybersecurity budgets, vendors, and consulting partners.
- Lead cross-functional security projects and complex transformation programs.
- Develop business cases and executive-level reporting for security investments.
Required Qualifications
- Bachelor's Degree in Information Security, Engineering, Computer Science, or related field.
- 15+ years of experience in Cybersecurity, Information Security, Risk Management, or Security Program Leadership.
- Proven leadership experience in highly regulated industries such as Utilities, Energy, Water, Critical Infrastructure, Manufacturing, or Public Sector.
- Strong experience with cybersecurity governance and compliance programs.
- Experience presenting cybersecurity risks and recommendations to executive leadership.
Preferred Certifications
-
- CISSP
- CISM
- CRISC
- PMP
- ISO 27001 Lead Auditor/Lead Implementer
-
