Global Cybersecurity GRC Manager

Overview

Requisition Number:27563

UGI Corporation (NYSE: UGI) is a holding company that distributes and markets energy products and services through our subsidiaries and the company’s common stock is a balanced growth and income investment. UGI Corporation has paid common dividends for more than 135 consecutive years.

In addition to a challenging career and competitive compensation, our employees enjoy:

Generous and Family-friendly Health & Welfare Benefits Including:

• Medical, Vision, and Dental Plans
• Optional Health Savings Account
• Optional Dependent Care Savings Account
• Paid Maternity/Paternity Leave
• Work from home policy
• Employee Assistance Program

Additional Benefits Include:

• 401K with a generous company match
• Tuition Reimbursement
• Assistance with Professional Credentialing
• Referral Bonuses
• Employee Discount Programs

This position is a leadership position reporting to the CISO. The Global Cybersecurity Governance Risk & Compliance Manager role is responsible for growth and execution of the enterprise-wide UGI Information Security Governance & Risk Program to ensure that information assets and associated technology, applications, systems, infrastructure, and processes are adequately protected through governance processes and adequate risk assessments. This hands-on role is also responsible for identifying, evaluating, and reporting on cybersecurity risk for information assets, while supporting and advancing business objectives through qualitative and quantitative metrics, third party relationship due diligence, and mergers and acquisitions.

• Govern the global information security program to ensure adequate controls are in place to protect the confidentiality, integrity and availability of information owned, controlled or processed by the Company via company policies and standards.
• Manage a global security compliance program based on UGI standards, industry standards, applicable regulatory and compliance requirements (e.g., FISMA, PCI, SOX, GDPR, CCPA, PUC, etc.).
• Accountable for reporting out the cybersecurity compliance of the company through monthly metrics.
• Advise the CISO on emerging risks and trends developing within the company from metrics and security exceptions and other forms of communications.
• Accountable for tracking all third-party breaches and remediations that are not directly supported by UGI’s technology team.
• Oversee technical assessments and processes of the effectiveness and design of cybersecurity controls, including application security controls, vendor security reviews, security exceptions, mergers & acquisitions, technology projects, identity access management, data loss prevention and artificial intelligence activities.
• Collaborate with key stakeholders (i.e. Information Technology, Cybersecurity Risk Manager, Legal, HR, Procurement, etc.) regarding the development, implementation and sustainability of programs that support the governance, risk and compliance processes.
• Lead the identification and development of talent and for managing performance to ensure goals and objectives are met or exceeded.
• Ability to develop a mentoring culture with both experienced team members and junior staff.
• Consistently measuring GRC talent performance to identify strengths and opportunities through qualitative and quantitative metrics.
• Ensuring a continuous improvement process is embedded in the teams’ practices to further advance the GRC program.
• Develop external relationships to keep a pulse on what is happening in the industry.

• This position requires keen external focus and avid learning given the rapid pace of change globally.
• Resourcefulness, good judgment, persistence, the ability to influence others and strong executive presence are some of the qualities of a successful candidate.
• Experience working with a diverse set of stakeholders across complex and diverse organizational structures.
• Prior managerial experience leading security or compliance teams is required.
• Experience in energy, financial or other regulated industries is preferred.
• Bachelor’s degree in Computer Science, Information Systems, Cyber Security or Information Technology.
• Mas…