Director, Cyber Security

Plains Ag - Houston, TX

Full-time - Senior

Houston, TX

Merchant Wholesalers, Durable Goods

About the position

The Cyber Security Director at Plains All American will oversee the security of the company's information systems and data, taking a risk-based approach to manage cyber security programs, policies, and standards across a large and complex organization. This role involves leading the cybersecurity operations team, ensuring compliance with laws and regulations, and integrating cybersecurity requirements into IT systems. The position offers a hybrid work schedule and is part of the IT leadership team, reporting directly to the Senior Director of Enterprise Technology.

Responsibilities

• Identifying, assessing, and mitigating cyber risks and threats across the company's infrastructure, systems, networks, and data.
• Implementing a cyber security strategy and roadmap that aligns with the company's vision, mission, values, and objectives.
• Establishing and maintaining a cyber security governance framework and policies that ensures compliance with applicable laws, regulations, standards, and best practices.
• Monitoring and reporting on the cyber security performance, risk posture, and maturity of the company, and providing recommendations for improvement.
• Overseeing the security operations center, incident response, threat intelligence, vulnerability management, and security awareness functions.
• Collaborating with the technology architecture group to design and implement secure and resilient solutions that support the company's business needs and goals.
• Building and maintaining strong relationships with internal and external stakeholders, including senior management, business units, customers, vendors, regulators, and government officials.
• Leading, mentoring, and developing a high-performing cyber security team that fosters a culture of excellence, innovation, and continuous improvement.
• Staying abreast of the latest cyber security trends, threats, and best practices, and ensuring that the company adapts accordingly.

Requirements

• Bachelor's degree in computer science, information systems, cyber security, or related field.
• Master's degree or relevant certification (e.g. CISSP, CISM, CISA, CRISC) is preferred.
• At least 10 years of progressive experience in cyber security, with at least 5 years in a leadership role.
• Demonstrated experience in executing a cyber security strategy and roadmap for a large and complex organization.
• Proven track record of managing cyber security operations, compliance, and IT as well as identity functions, and delivering successful outcomes.
• Strong knowledge of cyber security frameworks, standards, laws, and regulations, such as NIST, ISO, PCI, HIPAA, FERC, NERC, etc.
• Excellent communication, presentation, and interpersonal skills, with the ability to communicate complex and technical issues to diverse audiences.
• Strong analytical, problem-solving, and decision-making skills, with the ability to balance risk and business needs.

Nice-to-haves

• Demonstrated experience in government and regulator affairs considered an asset.
• "Secret" level security clearance would be an asset.

Benefits

• Free parking
• Health insurance
• Dental insurance
• Vision insurance
• Vacation time off
• Hybrid work schedule