Job Description:
DIRECTOR, GLOBAL CYBERSECURITY
Reporting to: Chief Information Security Officer
Role Overview :
The Director, Global Cybersecurity leads Fluence's global cybersecurity operations and strengthens the organization's ability to identify, investigate, contain, and recover from cybersecurity threats across corporate IT, cloud, customer-facing, and operational technology environments. Reporting to the Chief Information Security Officer, this role provides strategic and operational leadership for security monitoring, threat detection, incident response, security awareness, OT security operations, and the cybersecurity technology infrastructure supporting these capabilities. The Director serves as a senior incident leader and trusted partner to cross-functional leaders. The ideal candidate combines deep technical credibility, decisive incident leadership, strong business judgment, and the ability to drive outcomes across a complex global organization.
Key Responsibilities :
Security Monitoring and Incident Response
• Lead global security monitoring, threat detection, threat hunting, and incident response across corporate IT, cloud, identity, endpoint, application, network, and relevant OT environments.
• Direct incident triage, investigation, containment, eradication, recovery, evidence preservation, communications, and lessons-learned activities for significant cybersecurity events.
• Oversee SIEM, endpoint detection and response, network detection, threat intelligence, and security automation capabilities, including detection engineering, alert tuning, escalation criteria, and response playbooks.
• Serve as incident commander or senior cybersecurity responder and coordinates response activities with cross-functional leaders across Fluence, external counsel, insurers, and forensic partners.
• Maintain and continuously improve the global Incident Response Plan, operating procedures, exercises, and readiness metrics.
OT Security Operations and Customer Protection
• Lead cybersecurity operations supporting Battery Energy Storage System and other customer-facing operational technology environments managed by Fluence.
• Define OT monitoring, logging, remote-access, detection, escalation, evidence-preservation, and incident-response requirements in partnership with relevant teams.
• Coordinate the intake, assessment, investigation, and resolution of customer-reported cybersecurity events.
• Drive remediation of material OT cybersecurity vulnerabilities and operational risks, escalating unresolved issues, resource constraints, and customer-impacting trends to the CISO and appropriate governance bodies.
• Support the operational implementation of relevant cybersecurity standards and frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443.
Security Awareness and Human Risk
• Lead Fluence's global security awareness and human-risk management program, including phishing simulations, targeted learning, employee communications, newsletters, and role-based training.
• Use threat intelligence, incident trends, and simulation results to prioritize awareness topics.
• Partner with Human Resources, Privacy, Legal, Communications, and business leaders to ensure awareness activities are effective, appropriately governed, and aligned with applicable employee and data-protection requirements.
• Develop metrics that measure employee reporting behavior, training completion, repeat risk patterns, and improvement in organizational resilience.
Security Infrastructure and Operational Excellence
• Define and execute the roadmap for cybersecurity infrastructure supporting monitoring, detection, incident response, threat intelligence, endpoint security, identity security, email security, data protection, vulnerability management, and automation.
• Oversee the architecture, implementation, integration, configuration, resilience, access control, change management, and lifecycle of critical security platforms.
• Expand automation to improve investigation quality, accelerate containment, reduce repetitive analyst work, and strengthen response consistency.
• Establish monitoring and security-control requirements for new technologies, cloud services, acquisitions, customer-supporting platforms, and OT assets before production deployment.
• Drive remediation of significant vulnerabilities and exposures with accountable asset owners and administrators.
Governance and Risk Management
• Drive continuous improvement of cybersecurity policies, standards, procedures, control requirements, and governance processes based on changes in the threat landscape, business environment, technology portfolio, and regulatory expectations.
• Drive global cybersecurity regulatory compliance initiatives, ensuring alignment with applicable laws, regulations, and industry standards. Lead compliance assessments and regulatory readiness activities, and drive remediation of identified gaps, and executive reporting while partnering with cross-functional teams to strengthen Fluence's security and compliance posture worldwide.
• Partner with the business leaders, and control owners to identify, assess, prioritize, and monitor cybersecurity risks.
• Provide effective challenge on material cybersecurity risks, control gaps, remediation plans, risk acceptances, and exceptions, and escalate unresolved or overdue risks through the appropriate governance forums.
• Maintain clear linkage among cybersecurity risks, incidents, vulnerabilities, audit findings, compliance obligations, and strategic improvement initiatives to support informed executive decision-making.
• Prepare risk reporting, dashboards, and decision materials for the Cybersecurity Steering Committee and other leadership forums, translating technical exposure into business, operational, customer, regulatory, and resilience impacts.
Metrics and Team Leadership
• Coordinate Cybersecurity Steering Committee agendas, pre-read materials, dashboards, incident updates, risk summaries, decisions, and action-item tracking.
• Present cybersecurity risks, operational trends, incidents, compliance status, investments, and remediation progress in clear business terms to executives and governance forums.
• Define and maintain cybersecurity operations metrics covering monitoring coverage, detection quality, response time, containment, remediation, security-tool health, awareness outcomes, and OT security operations.
• Lead, develop, and mentor a globally distributed cybersecurity team; establish clear roles, on-call expectations, succession coverage, cross-training, and documented operating procedures.
• Manage security service providers, technology vendors, and external incident-response partners while maintaining accountability for service quality and outcomes.
Required Qualifications :
• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related field, or equivalent practical experience.
• Minimum 15 years of progressive experience in cybersecurity operations, incident response, security engineering, infrastructure security, or a related discipline.
• Demonstrated experience leading significant cybersecurity incidents involving multiple technical and business stakeholders.
• Strong experience with SIEM, endpoint detection and response, network security monitoring, identity protection, cloud security, threat intelligence, security automation, and incident-response technologies.
• Experience operating security capabilities across Microsoft Azure, AWS, or GCP.
• Demonstrated mastery of cybersecurity governance, risk management, incident response, and control frameworks, with extensive experience applying and operationalizing the NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443 to establish enterprise and OT security requirements, assess control effectiveness, guide risk-based decisions, and drive sustainable remediation across complex global environments.
• Ability to communicate complex technical risks clearly to executives, customers, legal counsel, auditors, and nontechnical stakeholders.
• Proven ability to influence and drive remediation across teams without relying solely on formal authority.
Preferred Qualifications :
• Master's degree in cybersecurity, information technology, engineering, business, or a related field.
• Experience securing or monitoring industrial control systems, operational technology, energy infrastructure, manufacturing environments, or customer-owned critical systems.
• Experience building or maturing a global security operations or incident-response function.
• Experience with Microsoft Sentinel, Microsoft Defender, Tenable, Darktrace, Microsoft Purview, BeyondTrust, or comparable platforms.
• Experience supporting cybersecurity certifications and audits, customer assurance, regulatory examinations, or critical-infrastructure requirements.
• Relevant certifications such as CISSP, CISM, GIAC Certified Incident Handler, GIAC Certified Forensic Analyst, or equivalent.
Key Competencies :
• Incident Leadership and Crisis Management
• Cybersecurity Operations and Technical Credibility
• Governance and Risk Management
• Executive Communication and Stakeholder Influence
• Operational Discipline and Accountability
• Team Development and Continuous Improvement
