Principal IT Governance and Risk Consultant

PSEG•Bethpage, NY

15h•Hybrid

About The Position

This position reports directly to the Sr IT Manager and supports IT’s control assurance program. The role manages vulnerability management remediation, IT risk management, reporting and metrics, and governance and process improvement across multiple technologies, taking into account business impact, cost, and complexity. It serves as a subject matter expert and primary facilitator for its assigned product area, working across IT teams to optimize value, anticipate issues, prioritize work as business needs change, and introduce IT best practices. The position leads product teams in a matrix environment to deliver business solutions. It oversees vulnerability remediation and compliance, develops and maintains IT controls aligned with regulatory and assurance frameworks, maps requirements to control objectives, and supports remediation and closure of findings. It also designs and improves governance processes, identifies process gaps, manages KPIs, and produces reports and dashboards for senior leadership. During storm or outage restoration, the employee may be assigned functions outside normal operations, work extended hours, or work onsite or at another location as directed. PSEG is not offering visa sponsorship for this position.

Requirements

Bachelor’s degree in a relevant field of study and at least 8 years of relevant work experience.
Demonstrated leadership capabilities through projects or other work-planning experience.
Broad knowledge of the IT business area’s functions and applications, and of system and technology alternatives.
Deep familiarity with regulatory and assurance frameworks, including NIST CSF, NIST 800-53, COBIT, NERC CIP, and SOX.
Strong knowledge of IT general controls, application controls, cybersecurity, and disaster recovery/business continuity.
Strong understanding of vulnerability management processes, risk assessment methodologies, and SLA/KPI management and reporting.
Demonstrated experience using analytical tools to automate performance reporting and manage KPIs.
Prior experience in IT governance, risk, and/or compliance.
Strong analytical ability to translate insights into actionable recommendations.
Strong verbal and written communication skills.
Strong facilitation, judgment, and escalation management skills.
Ability to foster working relationships with the team, IT management, and vendor teams.
Demonstrated ability to measure process performance, identify constraints, and recognize escalation requirements.
Department of Energy regulation 10 CFR 810 eligibility is required; where applicable, the successful applicant must meet one of the listed U.S. citizenship, permanent-residency, generally authorized destination, or protected-individual criteria.

Nice To Haves

Ability to automate repetitive tasks.
Ability to handle complex challenges under time constraints.
Project Management Professional (PMP) certification.
Certified Information Security Manager (CISM) certification.
Certified in Risk and Information Systems Control (CRISC) certification.

Responsibilities

Serve as the primary point of contact for vulnerability management remediation and govern and enforce the IT vulnerability management process.
Work with IT teams to report SLA adherence and manage vulnerability remediation progress throughout its lifecycle.
Collaborate with cybersecurity to manage risks related to open vulnerabilities; escalate unresolved vulnerabilities promptly and close backlogs.
Lead development and maintenance of IT controls aligned with frameworks such as NIST, NERC, ISO, and SOX.
Map regulatory, audit, and business requirements to control objectives and ensure ongoing compliance.
Prepare management responses and remediation plans, and track closure of findings.
Collaborate with IT Risk Management, Cybersecurity, and Audit teams to ensure controls support company objectives.
Design and build governance processes for IT vulnerability management, risk management, and compliance.
Identify process gaps and recommend improvements to increase efficiency and reduce operational risk.
Define, track, and manage KPIs for IT business areas and capabilities.
Produce status reports and dashboards for senior leadership, ensuring quality using company-approved methodologies.
Lead and facilitate work across multiple IT teams, prioritize actions with IT resources as business needs change, and serve as a subject matter expert for the assigned area.
Keep informed about technical and managerial advances in IT and lead the introduction of best practices.