Security & Controls Lead, US Utilities

AES Corporation • Dayton, OH

48d

About The Position

At AES, we're accelerating the future of energy. As a global leader in sustainable power, we're committed to delivering innovative solutions that prioritize safety, collaboration, and operational excellence. The Security and Controls Lead will be responsible for leading the digital governance, risk, and compliance (GRC) functions within AES' electric utility digital operations in Indiana and Ohio. This role will ensure that the company adheres to all Digital policies and industry standards with a particular emphasis on compliance. The Security and Controls Lead will work closely with various departments to develop and implement effective compliance programs, risk management strategies, and governance frameworks.

Requirements

• Bachelor's degree in Business, Finance, IT, Engineering or a related field.
• Minimum of 3 years of experience in governance, risk, and compliance roles, preferably within the electric utility sector or similar regulatory environment.
• Strong knowledge of regulatory requirements, industry standards, and best practices related to governance, risk management, and compliance.
• Excellent analytical, problem-solving, and decision-making skills.
• Self-starter with strong communication and interpersonal skills and the ability to work effectively with stakeholders at all levels of the organization.
• Experience in developing and delivering training programs on compliance and risk management topics.
• Accomplished user of Microsoft business tools including Excel, PowerPoint, Word, SharePoint and Office 365.

Nice To Haves

• Professional certifications (e.g., CISA, CRISC, CISM) are not required, but desired.
• Experience in using GRC software and tools (e.g. ServiceNow GRC, SAP GRC, Audit Board, Workiva) is desired, but not mandatory.

Responsibilities

• Compliance Management: Ensure the company complies with all relevant Digital regulations, standards, and internal policies. Develop and maintain compliance programs, plan and conduct regular audits, and manage compliance reporting.
• Risk Management: Identify, assess, and mitigate risks across the Digital organization. Develop risk management strategies and frameworks, conduct risk assessments, and monitor risk mitigation activities.
• Governance: Develop and implement Digital governance frameworks to ensure effective decision-making and accountability. Establish policies and procedures, and ensure they are communicated and adhered to across the organization.
• Audit and Reporting: Conduct regular audits to ensure compliance with Digital requirements and internal policies. Track progress, prepare and present compliance and risk management reports to key internal stakeholders.
• Training and Awareness: Develop and deliver training programs to educate employees on compliance requirements, risk management practices, and governance frameworks. Promote a culture of compliance and risk awareness across the Digital organization.
• Collaboration: Work closely with various departments, including legal, finance, Digital, and operations, to ensure a coordinated approach to compliance, risk management, and governance. Provide guidance and support to business units on compliance and risk-related matters.
• Continuous Improvement: Lead the identification, prioritization and inclusion of AES systems and processes to be covered by GRC and ITGC scope to broaden control and compliance. Continuously monitor and improve the Digital GRC processes and frameworks to ensure they remain effective and aligned with best practices and regulatory requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Utilities
• Number of Employees: 5,001-10,000 employees