Director, OT Operations, Cybersecurity, and Governance

The Company

The energy industry is entering one of the most significant periods of growth and transformation in its history. Meeting the nation’s growing demand for reliable electricity will require new ideas, new infrastructure, and talented people committed to building for the future.

At Cypress Creek Energy, we’re meeting that challenge by developing and operating the energy infrastructure needed to power communities, support economic opportunity, and strengthen resilience. We believe our responsibility extends beyond the grid and that how we build matters just as much as what we build.

That same commitment extends to our employees. We invest in professional growth, encourage collaboration across teams, and provide opportunities to take ownership, expand your expertise, and advance your career. Our culture is grounded in safety, accountability, respect, and a shared commitment to deliver results. Join us and help meet one of the most important energy challenges of our time while building a rewarding career.

Overview

Cypress Creek is seeking a Director, OT Operations, Governance, and Cybersecurity to lead the strategy, delivery, and continuous improvement of the operational technology services that monitor and control our generation sites. This leader will be accountable for reliable OT operations, a consistent governance framework, adherence to NERC Regulatory Standards, and a risk-based cybersecurity program across SCADA and supporting infrastructure. The Director will establish priorities, lead technical teams and service providers, manage budgets and technology roadmaps, and partner with operations, engineering, IT, cybersecurity, and compliance to protect personnel, maintain availability, and support fleet growth without compromising safe operations.

Responsibilities

• Define and execute a multiyear OT strategy and roadmap aligned with fleet growth, operational priorities, cybersecurity risk, and business objectives.
• Establish the OT operating model, service ownership, decision rights, accountability, and performance expectations across internal teams and service providers.
• Lead, mentor, and develop multidisciplinary OT operations, engineering, governance, and cybersecurity personnel.
• Develop annual operating and capital budgets, business cases, staffing plans, and investment priorities for OT services and infrastructure.
• Prioritize initiatives using risk, reliability, lifecycle condition, regulatory obligations, cost, and business value.
• Provide executive-level reporting on OT strategy, financial performance, resource needs, material risks, and delivery milestones.

OT Cybersecurity Program Owner

• Own the OT cybersecurity program, control framework, roadmap, and risk-based priorities across generation sites and supporting infrastructure.
• Direct asset inventory, network segmentation, vulnerability management, secure configuration, patching, endpoint protection, and security monitoring practices.
• Establish requirements for identity, privileged access, multifactor authentication, vendor remote access, removable media, and transient cyber assets.
• Lead OT cyber incident preparedness, response, escalation, communications, lessons learned, and corrective-action tracking.
• Coordinate threat intelligence, detection engineering, security monitoring, and response workflows with enterprise cybersecurity and site operations.
• Measure and communicate cybersecurity maturity, control effectiveness, exposure trends, remediation progress, and residual risk.

Regulatory Compliance

• Provide leadership and oversight for applicable regulatory obligations, including NERC CIP and O&P requirements and internal compliance commitments.
• Translate regulatory requirements into sustainable OT procedures, controls, evidence standards, ownership assignments, and operating routines.
• Maintain audit-ready documentation and evidence for access, configuration, patching, vulnerability, incident, recovery, and change-management controls.
• Partner with legal, compliance, operations, engineering, and cybersecurity teams to assess applicability and address control gaps.