Cybersecurity Managing Consultant-Energy Providers

Guidehouse12 months ago
San Antonio, TX, United States
On-site
Full-time
Junior Level (1-3 years)

Job Description

Position Overview

We are seeking a highly skilled professional to design and implement secure, compliant architectures for enterprise and operational environments. This role requires deep expertise in regulatory frameworks, cybersecurity best practices, and advanced data architecture.

The annual salary range for this position is $102,000.00-$170,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

Key Responsibilities

  • Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data.
  • Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance.
  • Implement NERC CIP standards (002-013), including audit preparation, evidence gathering, and mitigation planning.
  • Secure data flows across AWS, Azure, and on-prem environments using encryption, IAM, and network segmentation.
  • Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations.
  • Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
  • Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
  • Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
  • Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.

Required Qualifications

  • Due to the nature of client engagements, must be a US Permanent Resident or US Citizen.
  • Managing Consultant: Bachelor's degree in a business, cybersecurity, security management, homeland security, information security, or related discipline AND five (5+) years post-graduation experience within the electric utility industry or a NERC related regulator; OR Master's degree with three (3+) years post-graduation experience within the electric utility industry or a NERC related regulator.
  • Associate Director: Bachelor's degree in a relevant discipline AND seven (7+) years post-graduation experience within the electric utility industry or a NERC related regulator; OR Master's degree with five (5+) years post-graduation experience within the electric utility industry or a NERC related regulator.
  • Work experience for all levels must emphasize North American NERC Reliability Standards (USA and/or Canada) supporting regulatory frameworks and processes around NERC Critical Infrastructure Protection (CIP) and Regional Entities.
  • Experience in designing enterprise data models, data lakes, warehouses, and integration frameworks using structured and unstructured data.
  • Deep understanding of NIST, ISO 27001, and CIS controls to architect secure systems and enforce security compliance.
  • In-depth knowledge of implementing NERC CIP standards (002-013), including audit preparation, evidence gathering, and mitigation planning.
  • Proficient in securing data flows across AWS, Azure, and on-prem environments with encryption, IAM, and network segmentation.
  • Experience designing and implementing RBAC, ABAC, MFA, and privileged access management aligned with CIP-007 and CIP-005 requirements.
  • Ability to design secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
  • Familiarity with securing OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
  • Ensuring data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
  • Strong writing skills for creating security architecture diagrams, CIP evidence packages, procedures, and training materials.
  • Ability to work effectively with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.
  • Flexibility to travel, including potential international travel as needed.
  • Willingness to work onsite in a Guidehouse Office or Client Office location.
  • Must currently reside in the contiguous United States.

Preferred Qualifications

  • Preference will be given to candidates within reasonable driving distance of a core Guidehouse Office or Client Office location.
  • Specific working experience related to any of the following: Bulk Electric System (BES) and power systems, Electrical Reliability, NERC/FERC Enforcement or Auditing.

Benefits & Perks

  • Medical, Rx, Dental & Vision Insurance
  • Personal and Family Sick Time & Company Paid Holidays
  • Position may be eligible for a discretionary variable incentive bonus
  • Parental Leave and Adoption Assistance
  • 401(k) Retirement Plan
  • Basic Life & Supplemental Life Insurance
  • Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
  • Short-Term & Long-Term Disability
  • Student Loan PayDown
  • Tuition Reimbursement, Personal Development & Learning Opportunities
  • Skills Development & Certifications
  • Employee Referral Program
  • Corporate Sponsored Events & Community Outreach
  • Emergency Back-Up Childcare Program
  • Mobility Stipend

Required Skills

NIST, ISO 27001, CIS controls
AWS, Azure, and on-prem security management
NERC CIP standards implementation
Encryption, IAM, and network segmentation
RBAC, ABAC, and MFA implementation
Enterprise data modeling
Risk assessment and regulatory compliance
OT security (EMS, SCADA, DCS)
Security architecture design and playbook development
Data lake, warehouse, and integration framework design