Manager-IT Risk Management

As an S&C Electric team member, you’ll work on projects that have real-world impact. You’ll help transform the grid for resilient and reliable power worldwide. S&C has more than a 100-year history of innovation and has been 100% employee-owned since 2012. We continue this legacy as a trusted, forward-thinking leader in the electrical industry. You will advance a safer, more reliable, and more resilient electrical grid. Our products help the grid adapt to severe weather and transition to clean energy. We’re big enough to be a respected industry leader but small enough for you to impact our company directly. Our commitment gives you opportunities to impact on and off the job positively.

Join S&C to make an impact on tomorrow’s energy challenges and become an employee-owner!

Hours

8:00 am – 5:00 pm (Mon-Fri) Remote

Compensation

At S&C, we are dedicated to providing competitive and equitable compensation for all our team members, and we are committed to transparency in our pay practices. The estimated annual base salary range for this position in the United States is $73,920 - $95,495.40. Individual pay within this salary range is determined by several compensable factors, including performance, knowledge, job-related skills and experience, and relevant education or training. This role is also eligible for S&C’s annual incentive plan (AIP), subject to eligibility criteria.

Join Our Team as Manager-IT Risk Management!

The Information Technology team is responsible for designing, implementing, and maintaining a robust technology infrastructure to support the organization’s operations. Through improving cybersecurity and troubleshooting technical issues to driving innovation through cutting-edge solutions, the IT team ensures seamless connectivity, data security, and optimal functionality, empowering the company with a reliable and efficient digital ecosystem aligned with strategic goals. 

The Manager-IT Risk Management manages a team of cybersecurity professionals and operationalizes the Cyber Security Operations Center (CSOC) Model of key CSOC functions and tiers. The manager is responsible for proactive and reactive risk mitigation through threat intelligence, technical and procedural controls, and incident preparation, management, and remediation. Responsibilities also include configuration and monitoring of security technologies for security posture management. While directly executing day-to-day CSOC activities, this role involves cross-functional collaboration and problem solving to communicate with other teams and stakeholders. Using a risk-based, proactive approach, the Manager works closely with the Director-IT Risk Management to maintain resilient security controls and processes and foster a culture of awareness within the organization. 

Key Responsibilities

• CSOC Program Development: Plan and execute operational plans with a 1-2 year focus to establish and mature comprehensive programs for Incident Management (IM) and applicable areas of Security Posture Management (SPM). Communicate with and influence key stakeholders within and outside of the CSOC to ensure effective establishment and execution of program policies, practices, and procedures. Manage SOC resources and service providers. Ensure continuous monitoring of the threat landscape and modify security technologies and procedures as appropriate to continually mature and improve CSOC programs. IM: Lead and exercise the full implementation of the IT Cybersecurity Incident Response Team (IT CSIRT) and its processes, and integration of the IT CSIRT with the Corporate Critical Incident Response Team (CCIRT). Ensure all needed security log information is received and rules are configured to capture relevant information and generating useful alerts that are actioned to best address risks. SPM: Implement, administer, and monitor technology and processes to detect and analyze weaknesses in the enterprise environment and ensure the prioritized adjudication of findings. This includes establishing and driving the implementation of security configuration baselines for endpoints and information assets.    
• Leadership & People Management: Lead, inspire, and develop a high-performing team of experienced professionals. Foster appropriate and professional workplace behaviors, address/mediate conflicts to restore harmony, and support a positive, healthy, and inclusive workplace culture by S&C’s mission, vision, values, and guiding principles. Consulting the Director, manage administrative team member processes, including but not limited to recruitment, hiring, induction, vacation management, performance reviews, performance improvement plans, firing, promotion, and workforce/succession plann