Project Manager - Security

Iberdrola•Boston, MA

1d•$125,000 - $167,400•Hybrid

About The Position

Responsible for managing various strategically significant cyber security compliance programs and projects on behalf of the Affiliates of AVANGRID with objectives of timely and cost effective completion. This position will require working with multiple layers of geographically dispersed management, skilled technical staff, internal and external audit teams and business personnel.

Requirements

Bachelor’s degree with at least 10 years relevant experience required
Demonstrated participation in Information Technology General Controls audits
Demonstrated participation in NERC-CIP audits
Design and documenting of Sarbanes-Oxley (SOX) 404 processes and procedures
Working knowledge of Cyber/Information Security standards of best practice
Experience in data processing and/or Information Technology environments
Strong program/project management skills.
Strong problem solving and analytical skills
Ability to understand and interpret complex compliance and regulatory requirements
Good interpersonal and communications skills

Nice To Haves

Energy Industry experience

Responsibilities

Program manage the design, documentation and implementation of Corporate Security Cybersecurity governance requirements specific to SOX 404 compliance.
Hold regular program/project status meetings.
Coordinate cybersecurity specific internal and external audit activities, including interfacing with technical teams, defining mitigation strategies, and status reporting; to ensure compliance with procedures and maximize effectiveness.
Process improve various (as assigned) cross functional cybersecurity procedures; evaluate, analyze and recommend new cybersecurity processes, technical solutions and efficiencies. For example, segregation of duties, access controls, etc.
Provide timely and effective support relating to NERC-CIP requirements.
Create and maintain relationships with internal and external constituents to foster collaboration and cooperation for current and future organizational cybersecurity compliance objectives.
Assist in risk identification, communication and recommendations for mitigation.
Participate in special projects and assignments as business dictates