Director, Global Cybersecurity

Fluence (Nasdaq: FLNC) is a global market leader delivering intelligent energy storage and optimization software for renewables and storage. Our solutions and operational services are helping to create a more resilient grid and unlock the full potential of renewable portfolios. With gigawatts of successful implementations across nearly 50 markets, we are transforming the way we power our world for a more sustainable future. For more information, please visit  fluenceenergy.com .

Job Description

DIRECTOR, GLOBAL CYBERSECURITY

Reporting to: Chief Information Security Officer

##

Fluence (Nasdaq: FLNC) is a global market leader delivering intelligent energy storage and optimization software for renewables and storage. Our solutions and operational services are helping to create a more resilient grid and unlock the full potential of renewable portfolios. With gigawatts of successful implementations across nearly 50 markets, we are transforming the way we power our world for a more sustainable future. For more information, please visit fluenceenergy.com .

Role Overview :

The Director, Global Cybersecurity leads Fluence’s global cybersecurity operations and strengthens the organization’s ability to identify, investigate, contain, and recover from cybersecurity threats across corporate IT, cloud, customer-facing, and operational technology environments. Reporting to the Chief Information Security Officer, this role provides strategic and operational leadership for security monitoring, threat detection, incident response, security awareness, OT security operations, and the cybersecurity technology infrastructure supporting these capabilities. The Director serves as a senior incident leader and trusted partner to cross-functional leaders. The ideal candidate combines deep technical credibility, decisive incident leadership, strong business judgment, and the ability to drive outcomes across a complex global organization.

Key Responsibilities

Security Monitoring and Incident Response

• Lead global security monitoring, threat detection, threat hunting, and incident response across corporate IT, cloud, identity, endpoint, application, network, and relevant OT environments.

• Direct incident triage, investigation, containment, eradication, recovery, evidence preservation, communications, and lessons-learned activities for significant cybersecurity events.

• Oversee SIEM, endpoint detection and response, network detection, threat intelligence, and security automation capabilities, including detection engineering, alert tuning, escalation criteria, and response playbooks.

• Serve as incident commander or senior cybersecurity responder and coordinates response activities with cross-functional leaders across Fluence, external counsel, insurers, and forensic partners.

• Maintain and continuously improve the global Incident Response Plan, operating procedures, exercises, and readiness metrics.

OT Security Operations and Customer Protection

• Lead cybersecurity operations supporting Battery Energy Storage System and other customer-facing operational technology environments managed by Fluence.

• Define OT monitoring, logging, remote-access, detection, escalation, evidence-preservation, and incident-response requirements in partnership with relevant teams.

• Coordinate the intake, assessment, investigation, and resolution of customer-reported cybersecurity events.

• Drive remediation of material OT cybersecurity vulnerabilities and operational risks, escalating unresolved issues, resource constraints, and customer-impacting trends to the CISO and appropriate governance bodies.

• Support the operational implementation of relevant cybersecurity standards and frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and IEC 62443.

Security Awareness and Human Risk

• Lead Fluence’s global security awareness and human-risk management program, including phishing simulations, targeted learning, employee communications, newsletters, and role-based training.

• Use threat intelligence, incident trends, and simulation results to prioritize awareness topics.

• Partner with Human Resources, Privacy, Legal, Communications, and business leaders to ensure awareness activities are effective, appropriately governed, and aligned with applicable employee and data-protection requirements.

• Develop metrics that measure employee reporting behavior, training completion, repeat risk patterns, and improvement in organizational resilience.

Security Infrastructure and Operational Excellence

• Define and execute the roadmap for cybersecurity infrastructure supporting monitoring, detection, incident response, threat intelligence, endpoint security, identity security, email security, data protection, vulnerability management, and automation.

• Oversee the architecture, implementation, integration, configuration, resilience, access control, change management, and lifecycle of critical security platforms.

• Expand automation to improve investigation quality, accelerate containment, reduce repetitive analyst work, and strengthen response consistency.

• Establish monitoring and security-control requirements for new technologies, cloud services, acquisitions, customer-supporting platforms, and OT assets before production deployment.

• Drive remediation of significant vulnerabilities and exposures with accountable asset owners and administrators.

Governance and Risk Management

• Drive continuous improvement of cybersecurity policies, standards, procedures, control requirements, and governance processes based on changes in the threat landscape, business environment, technology portfolio, and regulatory expectations.

• Drive global cybersecurity regulatory compliance initiatives, ensuring alignment with applicable laws, regulations, and industry standards. Lead compliance assessments and regulatory readiness activities, and drive remediation of identified gaps, and executive reporting while partnering with cross-functional teams to strengthen Fluence’s security and compliance posture worldwide.

• Partner with the business leaders, and control owners to identify, assess, prioritize, and monitor cybersecurity risks.

• Provide effective challenge on material cybersecurity risks, control gaps, remediation plans, risk acceptances, and exceptions, and escalate unresolved or overdue risks through the appropriate governance forums.

• Maintain clear linkage among cybersecurity risks, incidents, vulnerabilities, audit findings, compliance obligations, and strategic improvement initiatives to support informed executive decision-making.

• Prepare risk reporting, dashboards, and decision materials for the Cybersecurity Steering Committee and other leadership forums, translating technical exposure into business, operational, customer, regulatory, and resilience impacts.

Metrics and Team Leadership

• Coordinate Cybersecurity Steering Committee agendas, pre-read materials, dashboards, incident updates, risk summaries, decisions, and action-item tracking.

• Present cybersecurity risks, operational trends, incidents, compliance status, investments, and remediation progress in clear business terms to executives and governance forums.

• Define and maintain cybersecurity operations metrics covering monitoring coverage, detection quality, response time, containment, remediation, security-tool health, awareness outcomes, and OT security operations.

• Lead, develop, and mentor a globally distributed cybersecurity team; establish clear roles, on-call expectations, succession coverage, cross-training, and documented operating procedures.

• Manage security service providers, technology vendors, and external incident-response partners while maintaining