Cyber Security Manager

American Electric Power Co.; Columbus (OH); On-site; USD 137,000 - 178,000; Full time

Job summary

American Electric Power is seeking a Security Manager to lead and develop a Security team, driving enterprise access management and RBAC governance. The role includes budgeting, stakeholder engagement, and alignment with SOX and NERC CIP regulations.

Ideal candidates bring extensive security leadership, IAM transformation experience, and strong executive communication skills, with preference for energy or highly regulated environments.

Qualifications

• Education: Bachelor’s or Associate degree with 2+ years of related experience in Security (Cyber and/or Physical) or equivalent, or HS diploma with 4+ years of related experience.
• 10+ years of Security (Physical and/or Cyber) experience with 4+ years of direct supervision experience preferred.

Responsibilities

• Own day-to-day operations and strategic direction for enterprise access management.
• Lead roadmap development, automation opportunities, and user adoption of modern access management platform.
• Partner with business units to mature RBAC across the enterprise with governance and ownership.
• Support SOX, NERC CIP, and regulatory requirements through effective access governance and reporting.
• Establish governance for service accounts, APIs, automation accounts, and AI/non-human identities.
• Identify opportunities to reduce manual effort, improve user experience, and reduce security risk.

Skills

Security leadership

IAM / access management

RBAC design

Regulatory compliance

Governance & reporting

Stakeholder management

Education

Bachelor's or Associate degree with 2+ years experience OR HS diploma with 4+ years experience

Job description

Job Summary

Responsible for medium- to long-term assignments of significant complexity and/or budgetary, strategic, or operational impact. Responsibilities include decision making, risk assessment, task prioritization, assignment and tracking of work, project oversight, employee development, performance coaching, team engagement, communication, planning, resource allocation, cost management, issue resolution, conflict management, customer service, and stakeholder relations.

The Security Manager is responsible for directly leading and developing Security team members, building and maintaining collaborative relationships with Operating Company, Business Unit, and Information Technology (IT) leadership, as well as external partners, suppliers, and vendors. The Security Manager is also responsible for managing annual O&M and capital budgets. The Manager is expected to establish credibility and gain acceptance as a trusted partner when working directly with Operating Company, Business Unit, and IT leadership.

The Security Manager will promote and apply Security solutions that align with the strategies and operational needs of Operating Companies and Business Unit customers. He or she will lead the team in delivering projects, initiatives, and daily operational activities through efficient processes, effective resource utilization, and risk reduction practices.

The Security Manager will establish and maintain an open, collaborative environment that promotes safety, accountability, employee engagement, continuous improvement, and operational excellence throughout the Security organization.

The primary differentiators between Security Manager roles are the size and complexity of projects led, the scope of responsibility, the level of risk involved, the breadth of organizational impact, the number of employees supervised, and the grade levels and experience of direct reports.

Job Description

What you’ll do:

Essential Job Functions & Tasks

• Own day-to-day operations, service delivery, and strategic direction for enterprise access management capabilities.
• Lead roadmap development, automation opportunities, and user adoption of modern access management platform.
• Partner with business units to mature Role-Based Access Control across the enterprise, ensuring sustainable governance and operational ownership.
• Support SOX, NERC CIP, and regulatory requirements through effective access governance, reporting, and control execution.
• Establish governance for service accounts, APIs, automation accounts, and emerging AI agents/non-human identities.
• Identify opportunities to reduce manual effort, improve user experience, increase provisioning automation, and reduce security risk.

Additional Preferred Requirements:

• Experience leading enterprise IAM transformations.
• Hands-on experience with Saviynt, SailPoint, or similar IGA platforms.
• Strong understanding of RBAC design and role engineering.
• Experience supporting utility, energy, or highly regulated environments.
• Strong executive communication and stakeholder management skills.
• Proven ability to lead large-scale organizational change initiatives.
• Non-human identity governance

What We're Looking For:

Education requirements are listed below:

• Bachelor's degree or associate degree combined with a minimum of 2 years of applicable business/technical experience in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field OR a HS diploma/GED combined with a minimum of 4 years of applicable business/technical experience preferably in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field.

Work Experience requirement listed below:

• 10 or more years of Security (Physical and/or Cyber), business administration, computer science, or other technical experience, demonstrating steady progression in responsibilities including 4 or more years of direct supervision experience preferred (in addition to any experience identified above).

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation

$136,539.00 - $177,503.00

Physical Demands

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Equal Employment Opportunity

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.

Share

Details

AEP offers an outstanding group of people to be a part of. The AEP culture values your integrity and awards your hard work.

Responsible for moderate-scale security assignments with limited direction from senior team members. Develops and maintains necessary documentation of security systems, projects, and/or processes to ensure unified understanding of system details. Performs and analyzes security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Identifies and documents potential mitigations/remediations and creates reports of findings with identified risk response. Participates in the review, evaluation, and recommendation of emerging security technologies. More involved in advanced level implementation, support, and/or usage of technical solutions. Assists with problem solving, decision-making, and functional area knowledge.

Responsible for moderate-scale security assignments with limited direction from senior team members. Develops and maintains necessary documentation of security systems, projects, and/or processes to ensure unified understanding of system details. Performs and analyzes security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Identifies and documents potential mitigations/remediations and creates reports of findings with identified risk response. Participates in the review, evaluation, and recommendation of emerging security technologies. More involved in advanced level implementation, support, and/or usage of technical solutions. Assists with problem solving, decision-making, and functional area knowledge.

The Security Operations and Event Monitoring Center (SOEMC) is an industry-leading operations center that plays a vital role in keeping AEP safe and compliant. An Event Monitoring Center Rep Assoc will answer alarms and phone calls to help protect AEP assets, assist internal customers, and be the face of AEP Security. The SOEMC monitors alarms throughout AEP’s footprint at various facilities, answers the corporate Security hotline, and helps maintain NERC CIP compliance. The Event Monitoring Center Rep Assoc will oversee other SOEMC members and terminals to ensure AEP Security standards are met. Under direct supervision and using clearly defined procedures, responds to internal customers with security needs and addresses alarms using monitoring software. Handles basic level problems, uses existing procedures to solve routine or standard problems, and escalates other issues. Under minimal supervision and assisting with writing clearly defined guidelines, responds to internal customers with security needs and addresses alarms using monitoring software. Handles basic-level problems and provides solution options based on criticality. The role provides for the SOEMC and oversees the day-to-day operations of a 24/7 security monitoring and response function. Additionally, they lead efforts to detect, analyze, and respond to security incidents, ensuring timely resolution and minimal impact on the organization.

AEP offers generous time off, competitive pay, and educational opportunities to help employees advance their careers.

Our culture is purpose-driven and team-oriented: we combine innovation with a customer-first focus to deliver reliable energy and brighter futures.