Security Policy & Compliance Coordinator

Entergy - Little Rock, AR

Full-time - Mid Level

Little Rock, AR

Utilities

About the position

The Security Policy & Compliance Coordinator is responsible for developing, managing, and coordinating compliance with enterprise-wide security policies, standards, and guidelines. This role involves working with various business lines to produce policies, track compliance, and raise employee awareness about security risks. The coordinator drives the mitigation of security-related risks and supports the development of security policies through operational and executive-level metrics.

Responsibilities

• Support the Enterprise Security strategy via policy and procedure development
• Partner with pertinent business SMEs to draft policy
• Support development of training and awareness materials that help drive a culture of security and compliance
• Support development of communications for policy roll out or policy update
• Develop and maintain metrics for centralized monitoring and reporting of key performance and risk indicators, as well as compliance against company security policies
• Manage security metrics program that is responsible for development and maintenance of operational and executive level metrics around security program execution and effectiveness
• Maintain dashboards of key performance and risk indicators for executive consumption and decision making
• Use metrics to identify areas where compliance with existing policy is not sufficient to support regulatory compliance or where compliance is not sufficient to manage risk

Requirements

• Bachelor's Degree and 6+ years' experience in policy development, standards development, compliance or risk management, or 10+ years' experience in lieu of a degree
• 2+ years of security experience
• Strong knowledge of the NIST Cybersecurity Framework and NIST 800-53
• Ability to establish control objectives and performance measures based on complex regulatory requirements, company policy, standards, and guidelines, and risk analysis
• Strong oral and written communication skills
• Experience managing projects and/or programs in a highly outsourced or matrixed environment is a plus

Nice-to-haves

• Advanced degree is a plus
• Familiarity with regulatory bodies and requirements impacting the utility industry
• Experience in use of business analytics technologies to ingest and analyze data and create reports (e.g. PowerBI)
• Strong knowledge of generally applicable and accepted audit and risk frameworks

Benefits

• Hybrid work flexibility
• Professional development opportunities
• Employee assistance programs
• Health insurance coverage
• 401k retirement plan