Develop and lead the company-wide information security strategy aligned to business goals. (Annual planning; ongoing oversight)
Establish and manage the risk management program, including regular reporting to executive leadership. (Quarterly reporting; ongoing monitoring)
Own SOC 2 Type 2, NIST 800-171, and other required audits end-to-end. (Annual; intensive during audit windows)
Serve as the primary point of contact for auditors and ensure continuous audit readiness. (Ongoing)
Maintain and evolve security policies, standards, and controls, including AI/LLM governance. (Quarterly review; updates as needed)
Lead incident response planning and periodic tabletop exercises. (Annual/Semi-Annual)
Partner with Engineering to ensure secure architecture, SDLC, and cloud security practices. (Ongoing)
Oversee vulnerability management, access controls, and vendor risk management. (Ongoing)
Lead customer security assurance efforts, including questionnaires and enterprise security discussions. (As needed)

Requirements

8+ years of experience in information security, risk, or compliance
3+ years leading security programs and external audits (SOC 2, NIST, ISO, or similar)
Strong working knowledge of cloud security, risk management frameworks, IAM, and secure SDLC practices
Demonstrated experience serving as primary audit owner and interfacing with auditors
Excellent written and verbal communication skills, including executive-level reporting
Bachelor’s degree in Information Security, Computer Science, Cybersecurity, or related field (or equivalent professional experience)

Benefits

Competitive compensation packages that recognize your expertise and contributions
Remote-first culture that provides flexibility and balance
Professional development opportunities, including training, mentorship, and career pathing
Comprehensive health, dental, and vision insurance starting day one
Short- and long-term disability and basic life insurance at no cost to you
401(k) plan with a 4% match to help secure your future
Flexible PTO and a supportive work culture that values balance
Mission-driven work with the opportunity to make a significant impact in the energy sector

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information securityrisk managementSOC 2 Type 2NIST 800-171cloud securityIAMsecure SDLCvulnerability managementincident response planningaudit readiness

Soft Skills

leadershipcommunicationreportingcollaborationorganizational skills