Security Manager

Job Summary

Responsible for medium- to long-term assignments of significant complexity and/or budgetary, strategic, or operational impact.

Responsibilities include decision making, risk assessment, task prioritization, assignment and tracking of work, project oversight, employee development, performance coaching, team engagement, communication, planning, resource allocation, cost management, issue resolution, conflict management, customer service, and stakeholder relations.

The Security Manager is responsible for directly leading and developing Security team members, building and maintaining collaborative relationships with Operating Company, Business Unit, and Information Technology (IT) leadership, as well as external partners, suppliers, and vendors.

The Security Manager is also responsible for managing annual O&M and capital budgets. The Manager is expected to establish credibility and gain acceptance as a trusted partner when working directly with Operating Company, Business Unit, and IT leadership.

The Security Manager will promote and apply Security solutions that align with the strategies and operational needs of Operating Companies and Business Unit customers. He or she will lead the team in delivering projects, initiatives, and daily operational activities through efficient processes, effective resource utilization, and risk reduction practices.

The Security Manager will establish and maintain an open, collaborative environment that promotes safety, accountability, employee engagement, continuous improvement, and operational excellence throughout the Security organization.

The primary differentiators between Security Manager roles are the size and complexity of projects led, the scope of responsibility, the level of risk involved, the breadth of organizational impact, the number of employees supervised, and the grade levels and experience of direct reports.

What you’ll do:

• Own day-to-day operations, service delivery, and strategic direction for enterprise access management capabilities.
• Lead roadmap development, automation opportunities, and user adoption of modern access management platform.
• Partner with business units to mature Role-Based Access Control across the enterprise, ensuring sustainable governance and operational ownership.
• Support SOX, NERC CIP, and regulatory requirements through effective access governance, reporting, and control execution.
• Establish governance for service accounts, APIs, automation accounts, and emerging AI agents/non-human identities.
• Identify opportunities to reduce manual effort, improve user experience, increase provisioning automation, and reduce security risk.

Additional Preferred Requirements:

• Experience leading enterprise IAM transformations.
• Hands-on experience with Saviynt, SailPoint, or similar IGA platforms.
• Strong understanding of RBAC design and role engineering.
• Experience supporting utility, energy, or highly regulated environments.
• Strong executive communication and stakeholder management skills.
• Proven ability to lead large-scale organizational change initiatives.
• Non-human identity governance.

What We're Looking For:

Education requirements:

• Bachelor's degree or associate degree combined with a minimum of 2 years of applicable business/technical experience in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field OR a HS diploma/GED combined with a minimum of 4 years of applicable business/technical experience preferably in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field.

Work Experience:

• 10 or more years of Security (Physical and/or Cyber), business administration, computer science, or other technical experience, demonstrating steady progression in responsibilities including 4 or more years of direct supervision experience preferred (in addition to any experience identified above).

The Physical Demand Level for this job is: S – Sedentary Work:
Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition…