Sr Mgr Security (Connectivity)

Consumers Energy•Jackson, MI

12h•Hybrid

About The Position

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7. This position is not eligible for immigration sponsorship, e.g., H-1B, TN, etc. Please do not apply if you will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B, TN, etc., now or in the future. We are unable to hire individuals with CPT, OPT, or STEM OPT for this position as the position is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship for a work visa. Location : This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify). General Summary of Job Responsibilities The Senior Manager, Security is responsible for overseeing and advancing the organization’s comprehensive security strategy across security operations, engineering, identity and access management (IAM), risk management, privacy, networking, and compliance. This role provides strategic leadership, technical expertise, and operational oversight to protect company assets, data, and infrastructure. The Senior Manager drives the execution of complex security initiatives, manages enterprise-level risk, and strengthens the organization’s overall security posture through proactive defense, regulatory adherence, and continuous program optimization. As a senior leader within the Security organization, the Senior Manager shapes security policies, ensures compliance with regulatory and industry standards, and leads responses to security incidents. This role fosters collaboration with internal and external stakeholders, influences security culture across the enterprise, and mentors a team of security professionals to achieve business-aligned security objectives.

Requirements

Exceptional verbal and written communication skills, with the ability to articulate complex security concepts to executive leaders, technical teams, and non-technical audiences at all levels.
Strong interpersonal and relationship-building skills, with the ability to lead cross-functional teams, collaborate effectively across departments, and drive consensus on security initiatives.
High emotional intelligence with the ability to understand and manage team dynamics, foster psychological safety, and cultivate an inclusive environment that values diverse perspectives.
Strong dedication to employee development, with a demonstrated track record of mentoring, coaching, and supporting team members’ career growth and succession planning.
Proven teamwork skills and a demonstrated commitment to humility, drive, and strong people skills.
Ability to develop and execute comprehensive security strategies that align with organizational goals while balancing risk management, operational requirements, and business priorities.
Proven ability to make sound, data-driven decisions under pressure—especially during security incidents—while balancing immediate response needs with long-term strategic considerations.
Expertise in leading organizational change within security programs, including managing resistance, promoting adoption of new technologies and processes, and driving a culture of continuous improvement.
Ability to evaluate, prioritize, and manage security risks in the context of broader business operations, ensuring effective resource allocation and appropriate risk tolerance.
Bachelor’s degree in a related field and seven (7) or more years of experience in one or more Security or IT disciplines, such as Asset Management, Automation, Compliance, Identity & Access Management, Network Engineering and Operations, Incident Response, IT Infrastructure and Architecture, Network and Security Operations, Privacy, Risk Management, or Security Engineering.
[OR] Associate’s degree in a related field and nine (9) or more years of experience in one or more of the above Security or IT disciplines.
[OR] High School Diploma/GED and eleven (11) or more years of experience in one or more of the above Security or IT disciplines.

Responsibilities

Define and implement the organization’s security strategy, ensuring alignment with business objectives, industry standards, and regulatory requirements while driving continuous improvement across all security functions.
Serve as the escalation point for significant security incidents, ensuring timely and effective response, remediation, and cross-team coordination during major events or disruptions.
Oversee the identification, assessment, and mitigation of security risks while ensuring full adherence to privacy laws, data protection requirements, and compliance frameworks across all security domains.
Stay current on emerging threats, technologies, and industry best practices, integrating new tools and methodologies to strengthen the organization’s security posture.
Perform other non-essential duties as assigned or as needed.
Manage workload demand, resource allocation, budgeting, and capital planning across all security functions while tracking key performance indicators (KPIs) and metrics to evaluate program effectiveness and operational efficiency.
Mentor, coach, and develop team members while fostering a culture of continuous learning, professional growth, and diversity, equity, and inclusion (DE&I) to build a high-performing and empowered security team.
Oversee and manage one or more security domains, such as: Security Operations & Incident Response (e.g., CSIRT, threat detection, monitoring, proactive threat hunting, forensic analysis) Security Engineering & Identity and Access Management (e.g., technology design and implementation, automation, identity provisioning, authentication, authorization, governance) Network/Connectivity (e.g., routing, switching, firewalls, data transfer) Risk Management, Privacy, and Compliance (e.g., risk assessments, privacy programs, regulatory compliance such as NIST, NERC CIP, PCI, audit readiness)
Additionally, ensure organizational resilience through Business Continuity and Disaster Recovery planning and execution.
Build and maintain strong relationships with internal and external stakeholders—including executive leadership, IT, legal, compliance, vendors, auditors, and regulators—and represent the organization in industry forums and regulatory discussions.
Lead continuous improvement initiatives using frameworks such as CMMI and Lean; oversee documentation processes; and contribute to long-term security roadmaps, strategic planning, and financial initiatives to support organizational goals and enhance security posture.