Security Policy & Compliance Coordinator

Entergy - Jackson, MS

Full-time - Mid Level

Jackson, MS

Utilities

About the position

The Security Policy & Compliance Coordinator is responsible for developing, managing, and coordinating compliance with enterprise-wide security policies, standards, and guidelines. This role involves working with various business lines to produce policies, track compliance, and raise employee awareness about security risks. The coordinator drives the mitigation of security-related risks and supports the development of security policies through operational and executive-level metrics.

Responsibilities

• Support the Enterprise Security strategy via policy and procedure development
• Partner with pertinent business SMEs to draft policy
• Support development of training and awareness materials that help drive a culture of security and compliance
• Support development of communications for policy roll out or policy update
• Develop and maintain metrics for centralized monitoring and reporting of key performance and risk indicators, as well as compliance against company security policies
• Manage security metrics program that is responsible for development and maintenance of operational and executive level metrics around security program execution and effectiveness
• Maintain dashboards of key performance and risk indicators for executive consumption and decision making
• Use metrics to identify areas where compliance with existing policy is not sufficient to support regulatory compliance or where compliance is not sufficient to manage risk

Requirements

• Bachelor's Degree and 6+ years' experience in policy development, standards development, compliance or risk management, or 10+ years' experience in lieu of a degree
• 2+ years of security experience
• Strong knowledge of the NIST Cybersecurity Framework and NIST 800-53
• Strong knowledge of generally applicable and accepted audit and risk frameworks (e.g. COBIT, CAG 20 Critical Security Controls)
• Ability to establish control objectives and performance measures based on complex regulatory requirements
• Ability to identify complex control gaps and the related business risk
• Familiarity with regulatory bodies and requirements impacting the utility industry
• Strong oral and written communication skills
• Experience managing projects and/or programs in a highly outsourced or matrixed environment

Nice-to-haves

• Advanced degree
• Experience in use of business analytics technologies to ingest and analyze data and create reports (e.g. PowerBI)
• Knowledge of principles, methods, and tools used to collect, store and organize data

Benefits

• Health insurance
• 401k
• Paid holidays
• Flexible scheduling
• Professional development programs