At United we are a team of engineers, builders, planners, and thinkers that design and build today’s infrastructure, for tomorrow. We come to work every day committed to drive growth and deliver projects that matter for our clients, ourselves, and our communities. Through our work in the nuclear, conventional generation, renewable and power delivery markets, we create resilient infrastructure to last generations.

Job Description

The IT Security Program Manager is responsible for developing, implementing, and maintaining cyber security solutions and programs for United Engineers & Constructors, Inc. (United). This includes ensuring security for new and existing systems is optimized and maintained, and processes are in place to control and monitor policies. Primary responsibilities include evaluating system architecture and effectiveness of security controls; working directly with United personnel and external resources in proposing and implementing solutions to manage and eliminate vulnerabilities; ensuring government and contractual requirements are met and managing security devices and systems.

The IT Security Program Manager is expected to possess the requisite knowledge and experience to develop, manage, and continuously improve the United’s IT security program. All IT Security program elements are required to meet United’s operational needs while applying generally accepted security practices and comply with associated industry standards. Implementation ability is a must in understanding the company’s operational requirements, technical capabilities, and rendering secure solutions in a very dynamic environment.

Responsibility:

• Lead and manage the United E&C Inc. IT Security Program.
• Provide primary oversight and management of security systems and services.
• Conduct compliance audits on United E&C Inc. systems and develop mitigation strategy.
• Work with customers and auditors to certify and accredit cyber security systems and environments.
• Conduct site cyber security assessments, develop commercial and government compliant project or site security plans along with plans of actions and milestones.
• Work closely with other personnel to conduct security testing and resolve security vulnerabilities prior to production release and test effectiveness of patches or mitigations prior to placing into production.
• Research and evaluate new IT implementations for risk and recommending mitigating factors or compensating controls.
• Develop and maintain security policies and procedures with application security and frameworks.

Primary Duties:

• Oversee and manage United E&C Inc’s vulnerability management, incident response and detection, business continuity planning, audit and monitoring, privacy, and compliance programs.
• Manage and administer United E&C Inc. security systems and services.
• Evaluate vendor proposals for purchases of hardware, software, and technical services to assure adherence to security requirements and associated technical specifications.
• Analyze and recommend roadmaps for software, hardware, and operating system selection and implementation.
• Prepare cost estimates for current and proposed projects, reflecting equipment, staff, and other resource requirements.
• Provide input into annual operating plans.
• Ensure IT compliance with Audit and Sarbanes-Oxley, NISPOM, NERC CIP, and NRC and other applicable regulations or requirements.
• Provide direction in developing and maintaining appropriate IT security levels.
• Serve as a mentor and provide guidance to the IT organization and company staff.
• Leads or participates in projects which deliver strategic objectives.
• Other duties as assigned.

Qualifications:

Minimum Qualifications

• Candidate must be a US Citizen.
• Bachelor’s degree in Information Technology or other relevant discipline with 8+ years of relevant experience in an Information Technology support field
• Or Associates degree or technical diploma/degree in Information Technology and 12+ years of relevant experience in Information Technology support field
• Or 16+ years of Enterprise level IT experience in an administration, support and/or oversight capacity.
• Strong problem solving, quantitative and analytical skills, conceptual abilities
• Strong written, verbal, interpersonal, collaboration and presentation skills
• Performing effectively in a team environment and independently with minimal direction; self-motivated.
• Track record of using discretion concerning confidential and sensitive company information
• Demonstrated working knowledge of
  • Information & Cyber Security practices, including vulnerability & penetration testing
  • Cloud infrastructure (Azure and AWS)
  • Operating systems (UNIX, Windows, etc.) and Microsoft Active Directory
  • Networking concepts, topologies, SDWAN
  • Application development
  • Database design and management
• Demonstrated knowledge and/or experience in one of the following security standards or governance frameworks:
  • NIST, CIS, USGCB, NISPOM, NRC, NERC CIP
• Must be able to travel (< 25% anticipated).

Preferred Qualifications

• Experience working in engineering, construction, industrial and government environments
• Experience with:
  • MS Bitlocker / McAfee Endpoint Encryption
  • Proofpoint Email Filtering / Security Education
  • MS Endpoint Management / Defender
  • SOC/MDR managed services
  • IDS/IPS implementation and management
• CISSP (ISC2), SANS certifications, or equivalent

BENEFITS:

United offers a benefit rich offering to our employees. We provide choices in Medical, Dental and Vision care programs. United assists employees in saving for their future by matching HSA contributions and 401k contributions. Additionally, we offer company paid Short Term Disability Insurance, Long Term Disability Insurance, and Life Insurance. United also offers a host of voluntary benefits to employees for items such as hospital indemnity insurance, AD&D, spousal and child life insurance, pet insurance identity theft protection and more! Educational Assistance and First Time Licensure incentives are also available. United supports life balance by offering a competitive PTO program in addition to paid holidays. We enjoy a great wellness program with regular incentives.

Due to the nature of work that United performs, candidates must be a US Citizen or Permanent Resident of the United States

United E&C is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class. United believes in each person’s potential, and we will help you reach yours.

PI216222975