Job Description: This role is within the Southern Company Technology Security organization. This position is a manager role responsible for assessing, documenting and reporting cyber risk and driving continuous improvement in security controls. This role combines broad cybersecurity and risk domain knowledge to reduce the company’s cyber risk posture over time. This manager role reports directly to Southern Company’s Director of Cybersecurity Strategy and Architecture and is responsible for managing a multimillion-dollar technology security budget. Partnering closely with the business, this leader enables the business to achieve its goals and objectives while limiting cyber risk exposure. He/she provides leadership and influence through active participation in organizational activities, a consultative approach that can align technical concepts with business context, and leverages business and technical resources from across the organization to evaluate, identify, and address security risks that meets the company’s requirements. Job Responsibilities: Exemplify a leadership approach focused on building, inspiring and developing outstanding teams Collaborate with the business on identification of cyber risks, both within Technology Organization and associated business partners Oversee and conduct periodic risk assessments in support of organizational goals Develop and maintain a set of metrics to demonstrate organizational improvements to cyber security risk reduction over time Measure adherence to published standards (company policies and requirements) and frameworks (e.g. NIST CSF, Gartner CARTA, CIS) Design, coordinate and oversee security controls validation testing to verify the cybersecurity solutions are performing as expected and manage the remediation of identified risks Manage 3 rd party cybersecurity risk to the company Map capabilities to stated strategy/direction and measuring/reporting Document unowned or long-term issues and/or risks to drive remediation, ownership, and accurately convey risk posture Drive innovation and leverages technology to create value and transform the business Apply strong leadership and strategic thinking to a diverse set of opportunities and challenges Establish and maintain excellent working relationships and partnerships across the Technology Organization functions, business partners, and external vendors and supplier Hire, develop, reward and retain a highly qualified and diverse team Create an environment that fosters accountability and engagement at all levels Establish an annual budget and meet expense and capital spend targets Job Recruitments: Bachelor’s degree preferred. An advanced degree is desirable. Industry certification required (CISSP, CISA, GIAC, CISM) 8 years of cybersecurity technology experience in architecture, engineering, consulting or operations 4 years of experience in leading teams Demonstrated ability to be an inclusive leader Strong leadership abilities, with the capability to attract and retain top talent, and motivate and develop personnel and future leaders Outstanding credibility and demonstrated ability to build strong relationships within the company and industry, as well as with vendors/suppliers. Demonstrated experience enhancing cybersecurity posture via a consistently applied, methodical approach Familiarity with measuring cybersecurity programs via formal frameworks such as NIST CSF, NIST 800-53, ISO 27001/27002, CIS, Cloud Security Alliance (CSA) Demonstrated knowledge of best practices related to cyber risk management, measurement and tracking Experience with information security regulation, to include those applicable to energy and utility industry Experience with driving cyber risk reduction in large, multi-stakeholder enterprise environments Demonstrated ability to influence management and key stakeholders and lead through influence Job Details: Company: Southern Company Vacancy Type: Full Time Job Location: Columbus, GA, US Application Deadline: N/A Apply Here getyourvacancy.com
Latest Jobs 2025 | Get Your Vacancy