Chief Cybersecurity Strategist

Requisition ID # 160099 

Job Category: Project / Program Management 

Job Level: Director/Chief

Business Unit: Information Technology

Work Type: Hybrid

Job Location: Oakland

 

 

Department Overview

The Information Technology (IT) organization designs, develops, operates and maintains the technology and telecommunications systems that enable PG&E to meet its commitment to providing safe, reliable and affordable service to customers.

 

IT partners with the business by increasing capabilities through the development of additional functionality, implementing new technologies, reducing costs, increasing productivity, and facilitating organizational and business effectiveness through enabling technologies.

 

Position Summary

The Chief Cybersecurity Strategist is an individual contributor who is responsible for creating a broad vision for the ecosystem of security tools to optimize for efficiency, effectiveness, cost and ability to derive high quality, actionable intelligence. This individual will work with architecture and engineering teams, as well as operations teams to understand current state, and constantly research and present a compelling roadmap for security tools covering IT, OT, multi-cloud and third-party attack surfaces. The individual will own the remit of ensuring proper use of AI in defense and the ability to detect AI-based attacks. They will also be responsible for leading the “bend the cost curve” initiative for cybersecurity through platform enablement and tools consolidation where it makes sense.

 

This position is hybrid, working from your remote office and your assigned work location based on business need. The assigned work location will be within the PG&E Service Territory.

 

Reporting Relationship

The Chief Cybersecurity Strategist reports directly to the Vice President, Cybersecurity.

 

Job Responsibilities

• Provide vision for security tools arsenal
• Champion tools coverage and consolidation strategy
• Create and maintain visuals of technologies versus capabilities
• Manage roadmap of tools to show consolidation and replacements
• Understand evolving threat landscape to plan for how to detect and defend better
• Strategize and plan for both effectiveness and efficiency in tools ecosystem
• Work with Arch/Engineering team on platform consolidation strategy
• Provide updates and perspectives to cyber leadership team
• Create and manage decision-making framework for tool selection within security ecosystem
• Create, maintain and strategize on data flow and integration across separate systems for additional intelligence
• Work with all Cyber stakeholders and IT stakeholders to understand tools needs and create roadmap based on decision framework
• Measure, manage and increase usage of existing tools
• Look at strategic overhaul of tools ecosystem to build a brand-new scalable model of tools and data across Cybersecurity
• Work with Architecture/Engineering team to determine how to build AI-enabled capabilities into security tools ecosystem
• Work with Enterprise Architecture, Products and Enterprise Platforms and Infrastructure and Cloud Services team on leveraging tools outside of security purview for strategic benefits to Security
• Strategize, plan and architect integrations of cloud monitoring tools into rest of security ecosystem
• Work with Security Intelligence and Operations Center (SIOC) Sec Engineering to strategize and document integrations with Security Incident and Event Management (SIEM) platform
• Conduct research on on-prem and cloud PaaS/SaaS tools to weave into security defense fabric
• Share learnings with the cyber leadership team and manage business justifications for addition/removal of tools and services
• Work with project teams as applicable to understand and document changes to tools ecosystem and ensure benefits realization with swap-out and closing out of contracts
• Own “Bend the Cost Curve” initiative for Cybersecurity related to technology spend to derive and ensure savings. 
• Travel 10-15%

 

Leadership Qualities

PG&E expects its leaders to conduct themselves with the highest ethics and integrity and to embody specific leadership qualities.

 

Strategic Mindset

• Seeing ahead to future possibilities and translating them into breakthrough strategies.
• Operating effectively, even when things are not certain or the way forward is not clear.

 

A Leader in the Community and Industry

• Effectively building formal and informal relationship networks inside and outside the organization.
• Anticipating and balancing the needs of multiple stakeholders.

 

Demonstrates Safety Leadership

• A safety champion in words and deeds with respect to both employee and public safety.
• Maintaining an environment of open dialog and free of retaliation.

 

Influences and Inspires

• Using various- communications that convey a clear understanding of the needs of different audiences.
• Maneuvering comfortably through complex policy, process, and people-related dynamics.

 

Optimizes Team Performance

• Building strong-identity teams that apply their diverse skills and perspectives to achieve common goals.
• Creating a climate where people are developed and motivated to do their best to help the organization.

 

Values Diversity and Creates Inclusion

• Recognizing the value that different perspectives and cultures bring to an organization.

 

Fiscally Responsible

• Interpreting and applying understanding of key financial indicators to make better business decisions.
• Planning and prioritizing work to meet commitments aligned with organizational goals.

 

Leads Ethically and in a Compliant Manner

• Sponsoring and sustaining a high integrity speak-up corporate culture which prioritizes ethics, safety and compliance.
• Building on necessary level of industry, company and subject-matter expertise, including laws and regulations.

 

Provides a High Level of Customer Service

• Building strong customer relationships and delivering customer-centric solutions.

 

Compensation

PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the job posting. This compensation range is specific to the locality of the job.  The actual salary paid to an individual will be based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, market value, geographic location, and internal equity.  Although we estimate the successful candidate hired into this role will be placed towards the middle or entry point of the range, the decision will be made on a case-by-case basis related to these factors.​

 

A reasonable salary range is:

Bay Area Minimum: $160,000

Bay Area Maximum: $270,000

 

Background Qualifications

 

Minimum

• Bachelors Degree in job-related discipline or equivalent experience
• Job-related experience, 12 years

 

Desired

• Advanced degree in a relevant field such as data management, computer science, information technology, systems engineering, operational governance, or other applicable discipline
• Leadership experience, 20 people or more
• Utility industry experience, electric or gas, or other job-related, 7 years
• Experience with Operational Technology, Industrial Control Systems
• Experience in or leading an operational cybersecurity team
• Experience with AI-based security technology
• Experience creating a security data lake
• Experience with NERC CIP, TSA and FERC utility industry regulations
• Experience in a leadership role on complex, high risk projects
• Experience in strategic planning or other related efforts
• Consulting experience