Information Security Manager

Menlo Park, CA, United States

Company Overview

Driven by our vision of the affordable, reliable, net-zero carbon grid of the future, Mainspring has developed a new category of power generation - the linear generator - that delivers local, scalable, and fuel-flexible power to help accelerate the transition to the net-zero carbon grid.

The unique combination of attributes offered by Mainspring's linear generator enables applications on both the commercial and utility sides of the meter for the $816B global electricity equipment market. We serve a wide range of Fortune 500 customers across markets and industries as well as top-tier utilities and other gridside providers.

We are looking to build relationships with people who share our values:

Pragmatic Optimism. Building a new category of world-class power generation requires the optimism of ambition and creativity, balanced with practicality to solve problems efficiently. The challenges that arise are opportunities for growth.

Excellence without Ego. We bring expertise and commitment to creating the best customer experience, from sales to deployment and service, just as we apply deep technical rigor to building and delivering world-class products. We strive for excellence and behave as leaders with the humility to acknowledge our challenges, both collectively and as individual contributors.

Proactive Collaboration. The integration and cross-disciplinary nature of Mainspring's business requires intentionally seeking out others who bring different skills, perspectives, and priorities. Our culture of inclusion and respect extends beyond our team to interactions with our partners and customers.

Mainspring is based in Menlo Park and has partnered with top-tier investors and utilities such as Khosla Ventures, Bill Gates, NextEra, and American Electric Power. More information can be found at www.mainspringenergy.com.

Mainspring has a high-impact opportunity to manage our Information Security Program. Information Security is becoming increasingly important as we expand into the utility, energy, and data center markets. Our customers have strict cybersecurity requirements for our Linear Generator, corporate information systems infrastructure and applications. Implementing and managing a robust program to ensure adherence to these requirements is a cross-functional effort requiring an experienced Information Security Manager. This manager will need to have domain expertise in information security policies and controls, and strong communication skills to work cross-functionally with Engineering, IT, Legal, Product, HR, and Supply Chain teams.

As the Information Security Manager, you will: Create and maintain information security policies and controls

Plan and execute regular disaster recovery / incident response drills

Work with external experts to coordinate regular penetration tests and other external vulnerability scans

Drive internal preparation for annual SOC 2 audits

Lead activities related to adherence to additional cybersecurity frameworks such as NIST CSF, NERC CIP, and others as appropriate to meet customer requirements

Monitor new and evolving cybersecurity threats

Critically, you should enjoy doing these things collaboratively as part of a highly interactive team

Qualifications At least 2 years of experience creating and maintaining policies and controls supporting SOC 2 audits, familiarity with other cybersecurity frameworks

Experience assessing vulnerabilities to determine applicability to a company's products and systems

Passion for working cross-functionally to successfully engage members of other teams to ensure adherence to cybersecurity requirements

The Bay Area salary for this role is $XX-$XX base + pre-IPO stock options + benefits. This position is on-site in Menlo Park, CA. The salary will be adjusted based on the experience of the employee.

Does your experience not meet all of our posted requirements? Studies have shown that some people are less likely to apply to positions unless they meet every listed requirement. At Mainspring, we are committed to building a diverse, inclusive, flexible, and collaborative environment, so if you want to help us transition the world to clean and affordable electricity, and don't meet all posted requirements for a particular role, we'd still love to hear from you. Mainspring can sometimes be flexible enough to shift responsibilities for the right person, or otherwise identify open or upcoming roles that may better fit your professional background.

In more traditional words, Mainspring Energy, Inc is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

This compensation and benefits information is based on Mainspring Energy's estimate as of the date of publication and may be modified in the future. We generally do not negotiate on salary once we have made an offer. The level of pay within the range will depend on a variety of job-related factors that may include location, relevant prior experience and/or education, or particular skills and expertise. New hires joining the company tend to be paid within the starting base pay range noted above, with opportunities to increase pay over time based on development of additional skills, competencies, and company-specific knowledge.