Job Description
The Principal Cybersecurity Engineer at Plus Power will lead and execute key cybersecurity activities, ensuring the protection of the company's information systems and compliance with security frameworks. This role involves collaborating with various teams to develop strategies, manage cybersecurity controls, and mitigate risks across operational and information technology environments.
Key Responsibilities
- Drive Plus Power's cybersecurity program and activities
- Promote secure by design and secure by default strategies
- Baseline, monitor, identify, and assess security vulnerabilities and risks
- Own and drive the resolution of security events and technical risks
- Build systematic security processes and frameworks
- Manage Compliance Security Posture Management Platforms
- Provide project management for the implementation of security controls
- Conduct automated evidence collection operations
- Assist with identification and mitigation of cybersecurity risks
- Develop and assess the compliance stance of cybersecurity frameworks
- Build and run a Third-Party Cyber Risk Management Program
- Communicate and maintain cybersecurity and risk metrics for executives
- Work with External Relations on cybersecurity legislation
- Collaborate with Legal and Compliance to establish cybersecurity controls
Requirements
- 8 years of experience in identifying security issues and developing mitigation plans.
- Bachelor's or Master's degree in Information Systems, Computer Science, Software Engineering, or a closely related field.
- Deep hands-on technical expertise in at least two of the following areas: network security, embedded hardware security, cryptography, web and network protocols, secure bill of materials, threat modeling, pen tests, or vulnerability assessments.
- Demonstrated use of scripting software development skills (e.g., Python, Rust) to automate processes.
- Certifications in Security (CISSP, CISM, CRISC, CISA, GIAC, and EC-Council).
- Experience in successfully implementing KPIs and metrics for security and risk management.
- Proficient in overseeing the execution of audits, certification programs, and control assessments, encompassing responsibilities such as scope planning, delineating control procedures in accordance with established policies, standards, and requirements, conducting control testing, associating issues with risks, and disseminating findings.
- Experience with SOC2, ISO27001, and/or NIST security frameworks, controls, tests, and auditing and associated requirements, in addition to familiarity with SOX-regulated environments.
- Excellent written and verbal communication skills to communicate effectively at all levels.
- Ability to work in a fast-paced environment while managing multiple priorities.
- Ability to operate as a team and/or independently while demonstrating flexibility to changing requirements.
- Demonstrated ability to work well in a cross-functional environment with both technical and non-technical team members.
- Ability to effectively use Microsoft Office products (Word, Excel, PowerPoint, Outlook).
Benefits & Perks
Highly competitive total compensation
Expected salary range begins at 150,000
Eligible to participate in annual bonus program
Flexible work from home or hybrid work
Unlimited vacation
Educational assistance
Parental leave
Engaging company culture with opportunities for in-person connection and learning and growth
Ready to Apply?
Join PlusPower and make an impact
Stay Updated on Sustainability Jobs
Get the latest renewable energy jobs and career tips delivered to your inbox.
Job Alerts
Get notified about new sustainability jobs
