| Location | Houston, TX |
Position Description
The IT Security Manager will lead our efforts to protect Fervo's corporate information assets, cloud environment, and data. This role will own the development and execution of our cybersecurity strategy, manage threat detection and response, and ensure compliance with the regulatory requirements that apply to our business. We are looking for someone who combines deep technical expertise with strong leadership and strategic vision to safeguard the organization against evolving cyber threats. This position will report to the Senior Director of Information Technology & Cybersecurity.
The role will be our subject matter expert (SME) for IT security posture, selecting, implementing, and evaluating the security solutions that protect our infrastructure, systems, and data and support our digital journey. It will partner closely with our operational technology (OT) cybersecurity function, which is responsible for plant and field control systems, at the points where corporate IT and plant systems meet. Beyond deep technical skills, the ideal candidate brings excellent communication and stakeholder-facing skills to build a culture of security awareness and compliance across the organization.
Responsibilities
Strategic Leadership: Develop and implement a comprehensive cybersecurity strategy aligned with organizational goals and industry best practices, with a focus on our Microsoft 365 and Azure environment. Conduct regular risk assessments and develop mitigation plans to address vulnerabilities. Stay current on emerging threats, technologies, and regulatory requirements, recommend innovative solutions, and implement improvements to security, reliability, and system performance.
Team Leadership: Lead and mentor a team of cybersecurity professionals, fostering skill development and collaboration while ensuring effective monitoring, threat analysis, and incident response. Allocate resources effectively to support operational and project-based initiatives.
Security Operations: Oversee the configuration, deployment, and maintenance of security tools, including firewalls, endpoint protection (e.g., Microsoft Defender, CrowdStrike), intrusion detection/prevention systems (IDS/IPS), and SIEM solutions (e.g., Microsoft Sentinel, Rapid7). Establish and enforce security policies, procedures, and controls across the organization.
Incident Response and Recovery: Develop and manage an incident response plan, including coordination of responses to security breaches or attacks. Collaborate with IT and business units to ensure effective disaster recovery and business continuity planning. Conduct post-incident analyses to identify lessons learned and enhance preventive measures.
Compliance and Reporting: Ensure compliance with applicable laws, regulations, and standards such as SOX IT general controls and ISO 27001. Provide regular reports to senior leadership on the state of cybersecurity, including risk assessments and mitigation efforts.
IT/OT Integration: Partner with the OT cybersecurity function on the integration points between corporate IT and plant systems, ensuring IT-side security controls, risk, performance, and total cost of ownership are addressed.
Systems Architecture: Provide architectural assessments, strategies, and roadmaps for systems selection and implementation. Define technical evaluation criteria for product and technology selection and determine technical approaches to ensure solutions result in a coherent systems design. Assess the systems architecture currently in place and provide improvement recommendations. Maintain security documentation and licensing.
Budgeting and Vendor Management: Manage the cybersecurity budget, including hardware, software, and service agreements. Evaluate and negotiate contracts with vendors, ensuring cost-effectiveness and alignment with business requirements.
Customer Focus and Security Awareness: Build a service-oriented security team that delivers excellent, responsive support and treats helping users as part of how we operate. Conduct security awareness training programs to educate employees on best practices and emerging threats.
Qualifications
Required
10+ years of relevant experience in cybersecurity, with 3+ years in a leadership capacity
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience
Deep understanding of security frameworks (e.g., NIST Cybersecurity Framework, CIS Controls)
Expertise in threat modeling and vulnerability management
Hands-on experience with security tools such as firewalls, endpoint protection (e.g., CrowdStrike), IDS/IPS, SIEM (e.g., Microsoft Sentinel, Rapid7), and DLP solutions
Knowledge of encryption technologies, authentication protocols, and identity management solutions (e.g., Microsoft Entra ID, SSO, MFA)
Hands-on experience securing Microsoft 365 and Azure environments, including identity, endpoint, and cloud security controls (e.g., Conditional Access, Microsoft Purview, Defender for Cloud), with a Zero Trust approach
Proficiency in incident response methodologies
Proven track record of leading large-scale, complex IT and security initiatives
Strong written and verbal communication skills with ability to effectively communicate and present security risk concepts to non-technical stakeholders and cross-functional teams
Preferred
Experience with penetration testing and forensic investigation tools
Experience with automation and scripting (e.g., Python, PowerShell) to streamline security operations
Familiarity with OT and industrial control system (ICS) security concepts and NERC CIP, and experience working alongside an OT security team
Certifications: CISSP, CISM, CISA, CEH, or GIAC
Location
Fervo Energy is headquartered in Houston, TX, with satellite offices in the Bay Area, CA; Golden, CO; and Reno, NV. This is a hybrid position based in our Houston office, with three or more days per week in the office. Some travel is required for this position (approx. 20%).