Security Policy & Compliance Coordinator

Entergy - New Orleans, LA

Full-time - Mid Level

New Orleans, LA

Utilities

About the position

The Security Policy & Compliance Coordinator is responsible for developing, managing, and coordinating compliance with enterprise-wide security policies, standards, and guidelines. This role involves working with various business lines to produce policies, track compliance, and raise employee awareness about security risks. The coordinator drives the mitigation of security-related risks and supports the development of security policies, ensuring effective operationalization through metrics and compliance tracking.

Responsibilities

• Support the Enterprise Security strategy via policy and procedure development.
• Partner with pertinent business SMEs to draft policy.
• Support development of training and awareness materials that help drive a culture of security and compliance.
• Support development of communications for policy roll out or policy update.
• Develop and maintain metrics for centralized monitoring and reporting of key performance and risk indicators, as well as compliance against company security policies.
• Manage security metrics program that is responsible for development and maintenance of operational and executive level metrics around security program execution and effectiveness.
• Maintain dashboards of key performance and risk indicators for executive consumption and decision making.

Requirements

• Bachelor's Degree and 6+ years' experience in policy development, standards development, compliance or risk management, or 10+ years' experience in lieu of a degree.
• 2+ years of security experience is required.
• Strong knowledge of the NIST Cybersecurity Framework and NIST 800-53.
• Ability to establish control objectives and performance measures based on complex regulatory requirements, company policy, standards, and guidelines, and risk analysis.
• Familiarity with regulatory bodies and requirements impacting the utility industry (e.g. Sarbanes Oxley Act, NERC, FERC, HIPAA, FCC, PCI DSS, NRC Cyber) is a plus.

Nice-to-haves

• Advanced degree is a plus.
• Experience managing projects and/or programs in a highly outsourced or matrixed environment is a plus.
• Familiarity with use of business analytics technologies to ingest and analyze data and create reports (e.g. PowerBI).

Benefits

• Hybrid work flexibility
• Professional development opportunities
• Health insurance coverage
• 401k retirement plan
• Paid holidays
• Employee discount programs