POSTING DEADLINE
This position is posted until filled. This role can sit out of Albuquerque, NM or out Texas locations in Lewisville & Texas City
DEPARTMENT
Department: Crisis Management and Resilience
PREFERENCES
We're seeking a leader who can help transform organizational resilience from a collection of plans and processes into an integrated, technology-enabled business capability. This position will play a key role in advancing enterprise incident management, business continuity, all-hazards preparedness, and operational resilience programs through the development of governance, workflows, training, exercises, and continuous improvement initiatives. The successful candidate will have a demonstrated track record implementing sustainable programs, leveraging technology platforms such as ServiceNow to institutionalize capabilities, and leading cross-functional teams through complex incidents and organizational change. The ideal candidate is equally comfortable building strategy, facilitating executive discussions, designing operational processes, and driving implementation to measurable outcomes.
JOB DESCRIPTION
Manager, Crisis Management & Resilience
Salary Grade: G04
Minimum Midpoint Maximum
$110,004 - $148,506 - $187,007
This position is covered by NERC CIP cyber security standards. Prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training. Annual cyber security training is also required.
SUMMARY:
Leads, plans, coordinates, trains, & manages Incident Response, Business Continuity, Emergency Management/Operations programs. Coordinates a wide array of stakeholders in affected departments & business units to effectively enhance organizational resiliency, prepare for, maintain continuity & respond to a wide variety of crises, incidents, disasters, and events, and establish and oversee implementation of corrective actions, develop policies, plans, & program activities.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Oversees the Business Continuity, Emergency Management/Operations, Incident Response Programs
Designs and/or coordinates Incident Response, Business Continuity, and Disaster Recovery exercises and drills with internal and external groups and participates as an active member of other regional and national training exercises
Develops, implements, presents, maintains, and coordinates the appropriate training programs in conjunction with the corporate training department regarding incident response, business continuity, and disaster recovery
Establishes and maintains relationships with federal, state, and local government representatives, comparable private sector colleagues, business operating units and internal stakeholders responsible for related business continuity plans and specific aspects of business continuity, disaster recovery, and incident response such as Corporate Security, Facilities, Risk Management, Human Resources, Legal, Operations, and Compliance
Maintains and ensures timely updates of all appropriate documentation including Incident Response and Business Continuity policies, plans, on-call lists, regulatory compliance evidence, and after-action reviews
Leads and manages all aspects of incidents, disasters, emergencies, and crises from identification, containment, investigation, eradication, reporting, recovery, and all necessary follow-up activities
Assembles, leads, and collaborates with cross-functional matrixed response teams and actively commands incidents/crises to achieve successful outcomes while maintaining continuity/resilience to the greatest extent possible
Acts as primary subject matter expert for cyber security incident response and associated emergency operations regulatory compliance
Maintains personal competency in related technology applications, engages in constant improvement by taking advantage of available cost-effective training opportunities
Develops and presents information to promote incident response preparedness & resiliency as core values
Regularly consumes and communicates relevant threat intelligence
Other duties as assigned
COMPETENCIES:
In-depth management, negotiation, technical skills, and demonstrated leadership and customer service skills
Ability to utilize working knowledge of information security best practices such as: NIST 800 series, ISO 27000 series, ISA, or COBIT
Excellent skills in risk assessment processes, policy development, proposals, work statements, product evaluations, and delivery of technology
Ability to understand enterprise business computing operations/requirements, and fundamental power generation operations
Knowledge of crisis management, business continuity, emergency management, incident analysis, and incident response management
Demonstrated skills in personnel management, budget management, and conflict management
Be an action-oriented, detail-oriented, goal-oriented self-starter with the ability to multi-task, effectively manage time, manage shifting priorities, and thrive in a complex, dynamic, fast-paced, ambiguous, and sometimes chaotic environment
Ability to organize and distill complex technical concepts into simple and easy to understand instructions and action items during an incident
QUALIFICATIONS
MINIMUM EDUCATION AND/OR EXPERIENCE:
Bachelor's degree in a related field with seven to nine years related experience, or equivalent combination of education and/or experience related to the discipline.
Related professional certification preferred (e.g., CISSP, CISA, Business Continuity Professional, Certified Incident Handler, etc.).
Master's degree preferred.
SUPERVISORY RESPONSIBILITIES:
Hires, trains, evaluates, rewards, and terminates employees. Designs, organizes, prioritizes, schedules, and leads work assignments. Fosters good working relationships with various groups. Appraises performance, rewards and disciplines employees, addresses complaints, and resolves problems. Indirectly supervises and guides enterprise employees, contractors, and electronic system users for performance of job functions in accordance with incident response & disaster recovery scope.
COMMUNICATION SKILLS:
Ability to respond effectively to highly sensitive inquiries or complaints
Ability to effectively give persuasive speeches and presentations on controversial or complex topics to various audiences
Ability to read and interpret complex documents such as safety rules, operating and maintenance instructions, and procedure manuals
Ability to write complex reports, regulatory documents, policies and correspondence
Ability to speak effectively before a broad range of groups of stakeholders, business partners, and employees in all areas of the organization
Read, analyze, interpret, and gather relevant technical procedures, confidential information, threat intelligence, business periodicals, professional journals, cooperative directives, procedures, or governmental regulations
MATHEMATICAL SKILLS:
Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume
COMPUTER SKILLS:
In-depth knowledge and experience with mainframe and client/server applications, computer networks, and information security concepts and issues
Strong working knowledge of current marketed security tools and technologies
Strong working knowledge of industry regulations (NERC CIP, Sarbanes Oxley, PCI) and industry security standards (NIST, ISO)
Strong working knowledge of malware and network analysis and investigation preferred
Strong, working knowledge of the latest Microsoft Office Suite
ANALYSIS AND PROBLEM-SOLVING ABILITY:
Ability to strategically approach issues. Ability to be proactive, adept at working with cross-functional teams and stakeholder groups. Ability to synthesize complex information. Ability to apply creativity to problem solving and utilize analytic skills and modeling capabilities to provide ongoing insight into the business and to make recommendations and decisions. Ability to identify and develop remediation or mitigation plans as necessary. Ability to coordinate with, and lead, cross-functional team of technical experts.
DECISION MAKING:
Conducts and guides enterprise incident response and disaster recovery project and operations activities and practices within the bound of approved security programs and policies, and in accordance with generally accepted security standards.
SCOPE AND IMPACT:
Protects all enterprise computing and operational platforms for the purpose of providing and preserving confidentiality, integrity, and availability of all enterprise systems, applications, and data. Protection and recovery of systems is intended to minimize potential costs directly related to operational, legal, regulatory, and reputation risk from loss of enterprise system operation or confidential or proprietary information. Failure to protect and recover systems in a timely manner from an incident exposes company to heightened regulatory oversight, monetary sanctions, increased expense, and loss of production revenue.
PHYSICAL DEMANDS:
While performing the duties of this job, the employee is frequently required to stand, sit, and/or walk up to 2/3 of the time. The employee must occasionally lift and/or move up to 30 pounds.
Ability to stoop, kneel, crouch, or crawl. Manual dexterity is required to perform computer applications and good vision is required to perform all aspects of the job. May require long periods of time in conference or meeting when one is required to talk and/or listen. Required to be on call 24-hours a day for emergencies.
Out-of-state travel is occasionally required.
WORK ENVIRONMENT:
Office environment or remote as needed.
