Cybersecurity Manager

Requisition ID:  91246 

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy. Want to be part of something powerful? Join our outstanding team and help shape the future of energy.

Position Specific Description

The Cybersecurity Manager will act as a Cybersecurity Business Partner (CBP) and a trusted security advisor to various SAP and Salesforce lines of business. The CBP comprehends security risks and technologies and effectively communicates these aspects to business units. Working collaboratively with the business across multiple services and platforms to address risk, the CBP advises business leaders to ensure decisions are made with security in mind. This advanced role is integral to the cybersecurity program, providing leadership, executive support, and strategic and tactical guidance for a world-class cybersecurity initiative supporting enterprise security goals.

As a business enabler, the CBP excels in communication and possesses the technical aptitude to integrate security fundamentals into all business aspects. The CBP must work closely with senior management, third parties, project managers, and business subject matter experts (SMEs). Additionally, the CBP must be personable and adept at translating cybersecurity issues into actionable business initiatives. A solid technical background is essential, enabling the CBP to understand technologies, their purposes, security requirements, and data protection needs, regardless of their location. 

Essential Job Duties:

• Serve as a trusted advisor with business unit leadership.
• Act as a liaison to ensure cybersecurity practices are built into business unit initiatives for the entire lifecycle.
• Work closely with security leadership to instill cybersecurity policies and practices throughout business units to address security operations, incident response, application security and infrastructure.
• Be actively informed and engaged in security projects across the business.
• Provide disaster recovery and business continuity planning advice when working with leaders for business and cybersecurity resiliency.
• Enforce the strong security culture set forth by the security leaders, ensuring uniformity across security leadership, business units and employees.
• Foster strong relationships with internal business units and excel in cybersecurity communication.
• Maintain up-to-date knowledge related to security threats, vulnerabilities and mitigations set forth to reduce the attack surface; circulate this knowledge through the business units.
• Identify and document threats and vulnerabilities that may impact the business and address them regularly with business units.
• In conjunction with security and business leaders, define key performance indicators (KPIs) and metrics aligning with business initiatives and deliver them to non-technical teams in terms that are accessible and comprehensible.
• Provide motivation to business units to adopt cybersecurity controls.
• Remove complexity and obstacles that hinder efficient security controls enterprise-wide.
• Build relationships with business units to deliver security-by-design controls incorporated into projects, architecture, infrastructure and applications.
• Stay abreast of new laws, regulations and standards, and assess their impact to the business.
• Verify security content training initiatives and internal/external communication are conducted regularly.
• Perform other duties as assigned.