IT GRC Administrator

WEC Energy Group•Milwaukee, WI

1d•$68,437 - $135,761•Hybrid

About The Position

WEC Business Services LLC, a subsidiary of WEC Energy Group, is hiring an IT GRC Administrator (IT Infrastructure Consultant) in Milwaukee, Wisconsin. The position currently offers a hybrid work arrangement, with time spent in the Milwaukee office. It belongs to a job family that also includes Associate IT Infrastructure Consultant and Senior IT Infrastructure Consultant; experience determines the level, and for someone already in this job family the move would be lateral. The role supports security governance, risk, and compliance activities across information technology (IT), operational technology (OT), and physical security. Work includes security risk assessments, vendor security risk assessments, mitigation and remediation governance, and administering security risk and governance platforms. The position uses technical knowledge and business acumen to develop durable GRC solutions aligned with security strategy and business needs, identify business-related security risks, and support leadership with governance metrics, measures, reports, and planning requirements. The position requires unescorted access to certain critical cyber assets. Applicants must satisfy Company and NERC Critical Infrastructure Protection Standard 004 security requirements, including a background investigation. Travel to other locations may be required. The listed pay range is $68,436.68 to $135,761.08; starting pay depends on factors including education, qualifications, experience, skills, location, shift, and travel requirements.

Requirements

Bachelor’s degree.
Satisfy Company and NERC Critical Infrastructure Protection Standard 004 security requirements, including a background investigation, for unescorted access to certain critical cyber assets.
Effectively communicate and build productive working relationships with internal and external stakeholders.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, Management Information Systems, or a related discipline.
Experience administering security governance, risk, and compliance solutions.
Experience creating and modifying workflow automation.
Strong knowledge of current and emerging cybersecurity risks and innovative risk management methods.
Prior experience defining security policies, standards, and controls.
Ability to engage stakeholders across business areas and functions.
Experience with IT security, OT security, and physical security operational metrics.

Responsibilities

Apply knowledge of applications, programs, and procedures for IT/OT cybersecurity and physical security to develop GRC solutions aligned with security strategy and business needs.
Identify business-related security risks and support requirements to inform leadership's strategic plans and project management requirements.
Support leadership through governance, risk, and compliance metrics, measures, and reports.
Liaise with stakeholders to track, educate, align, and advise on enterprise security risks across IT, OT, and physical security.
Use working technical knowledge of systems, equipment, and supporting applications to support the business and enterprise.
Maintain key performance and process metrics to evaluate the efficiency and effectiveness of processes, procedures, and systems.
Use various forms of communication effectively to perform job duties.
Build productive working relationships internally and externally, and work with clients to understand business processes and how technology enables them.
Support security risk assessments, vendor security risk assessments, mitigation and remediation governance, and administration of security risk and governance platforms.
Travel to other locations as required.