SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 140,000 - 180,000 / annual
LineVision is a grid-enhancing technology company serving eight of the ten largest US utilities with optical sensors and advanced environmental modeling to deliver dynamic line ratings and enable safer, more reliable grid operations.
You will lead the security program as Information Security Director, reporting to the VP of Security, IT, and Quality. You will manage a Security Analyst and have broad autonomy over security engineering, security operations, controls execution, governance, and compliance. Your mission is to build a security posture that exceeds industry standards and becomes a strategic business advantage, giving customers confidence in LineVision's ability to protect sensitive data and the electric grid from attack.
Core responsibilities include:
**Compliance & Governance**: Own the annual SOC 2 Type II and ISO 27001 audit cycles using Vanta, including all controls, internal/external audits, and nonconformity tracking. Lead annual NIST CSF risk assessments, monthly Platform and Hardware risk reviews, and quarterly GRC reviews. Maintain policies and report ISMS efficacy metrics to leadership.
**Security Engineering**: Conduct AWS cloud and sensor penetration tests, ISA/IEC 62443 product security assessments, and vendor/product risk assessments.
**Security Operations**: Oversee vulnerability management, CrowdStrike Falcon Complete detection rules, NextGen SIEM data feeds, MSSP relationships, and open-source license compliance via FOSSA.
**Incident Response & Resilience**: Own the incident response program and plan, including annual third-party tabletop exercises, business continuity and disaster recovery planning, and implementation of lessons learned.
**Data Protection**: Define and guide data management controls across all company systems and applications, ensuring rigorous application of policies and customer contractual obligations.
**Customer & Sales Support**: Lead responses to customer security questionnaires, contract security reviews, and customer-facing security presentations.
**AI Security**: Identify risks and define security standards for enterprise and product AI; inform the AI governance program.
**Team Leadership**: Coach and develop the security team. This role requires participation in a compensated rotational on-call schedule.
Within 3 months, you will establish operational rhythm with the security team, take ownership of the audit calendar and risk register, implement an intake/prioritization process for security work, take over customer security questionnaires, and lead monthly security risk reviews.
Within 6 months, you will deliver SOC 2 Type II and ISO 27001 surveillance audits with no major nonconformances, complete an annual IEC 62443 assessment, extend data controls to Atlassian/Slack/email, plan and conduct the incident response tabletop, and mature CrowdStrike detection rules.
Within 1 year, you will propose a 2–3 year security roadmap, reduce questionnaire effort through self-service materials, define security requirements for next-generation sensors, establish ISMS efficacy metrics, and lead quarterly GRC reviews.
**Key Competencies**: Ownership of security program outcomes; planning and prioritization to balance interrupt-driven work with long-term projects; clear communication of risk to engineers, executives, customers, and auditors; sound judgment in risk-based decision-making; people leadership and delegation.
**Requirements**:
- 6+ years in information security, with at least 2 years in a lead or people-management role
- Direct ownership (not only support) of SOC 2 Type II and ISO 27001 audits
- Experience conducting risk assessments with NIST CSF or equivalent framework
- Hands-on experience with penetration test management, vulnerability management, and EDR/SIEM tooling (CrowdStrike preferred)
- Experience with AWS cloud security
- Experience responding to enterprise customer security questionnaires and contract requirements
- CISSP, or commitment to earn it within 18 months of start date
**Preferred Qualifications**:
- Experience with OT/ICS or IoT security, including IEC 62443
- Familiarity with utility sector requirements (CEII, NERC CIP) or other regulated critical infrastructure
- Experience leading incident response for a real event
- Experience with Vanta or similar compliance automation
- Experience in AI Governance and/or assessing the security of AI tools and features
