Univers provides the world’s most comprehensive decarbonization system.
We help companies and countries optimize energy systems and reduce carbon emissions with accurate, reliable, and actionable decarbonization data. Our EnOS (Energy and Environment Operating System) platform connects on-the-ground operational technology and in-the-cloud intelligence to deliver real-time energy data and data-driven carbon monitoring, reporting, and abatement.
With 220 million sensors and smart devices connected, 550GW of renewable energy under management, and a community of over 500 customers, we’re helping the world’s leading businesses get the world to net zero—and what comes after it.
For more information, please visit https://univers.com/
As the lead for Security Operations, you will be responsible for supporting and overseeing the Security Operations Center (SOC) and the Security Infrastructure departments. This role is pivotal in maintaining the cybersecurity posture of the organization, ensuring continuous improvement, compliance, and effective risk management.
Security Operations Lead
Responsibilities:
· Strategic Leadership and Vision:
Develop and execute an enterprise-wide security strategy and roadmap, incorporating full stack security requirements and gaining key stakeholder sponsorship. Security Operations Center
· (SOC) Oversight 24/7/365 Security Operations Center:
Ensuring continuous monitoring and effective incident response. Oversee the development of new detection rules and automation through SIEM and SOAR systems.
· Threat and Vulnerability Management:
Lead the Threat Management program, including threat intelligence research, threat hunting, and vulnerability management. Ensure a state of readiness to respond to threats and manage incidents.
· Penetration Testing and Incident Handling:
Conduct penetration testing, attack responses, and forensic investigations. Take the lead on security incidents and ensure robust investigations and corrective actions.
· Security Infrastructure Management:
Oversee the security infrastructure, focusing on hardening security measures across enterprise, test, and production environments.
· Compliance and Policy Development:
Establish and maintain policies, procedures, standards, and guidelines that enable and support the security strategy. Conduct quarterly reviews and ensure compliance with ISMS and BCP executions.
· Security Awareness and Training:
Develop and manage the organization’s security awareness programs and phishing exercises. Provide security training to employees, third parties, suppliers, partners, and customers.
· Team Leadership and Development:
Hire, motivate, and develop a world-class global team of security professionals. Build and maintain succession plans, and coach/mentor individuals to foster high-performing teams.
· Collaboration and Communication:
Collaborate with leaders in Platform Engineering, Edge, Product Management, and other departments to integrate and utilize complex security solutions. Communicate upcoming changes and security policies effectively across the organization.
· Risk Management and Reporting:
Proactively identify and register risks in the organization’s risk register. Monitor and report on cybersecurity threats, intelligence, and remediation plans to the CISO.
· Organizational Influence and Change Leadership:
Lead through influence within a matrixed organization, inspiring teams across functions and technical areas. Routinely contribute to organizational performance and embrace strategic changes.
Qualifications & Experience:
- 5+ years of progressive security leadership and management experience in multi-disciplinary environments
- Proven experience in cybersecurity operations management, preferably in a similar leadership role.
- Hands-on experience building and managing an information security program including security operations. This includes: Threat Hunting, Threat Intelligence, and Red Teaming
- Hands-on technical experience demonstrating a willingness to get into the weeds and do the dirty work if necessary.
- Experience with cloud security, vulnerability management, and compliance frameworks
- Excellent leadership skills with the ability to manage and develop a team
- Strong communication and stakeholder engagement abilities
- Strong knowledge of advanced digital forensics and incident response capability to address threats posed to IoT and cloud
- Advanced degree or relevant certifications (e.g., CISSP, CISM) preferred