Information Security Program Lead

PNM Resources, Inc.; Albuquerque (NM); On-site; USD 95,000 - 161,000; Full time

Job summary

PNM Resources, Inc. in Albuquerque, NM is seeking an Information Security Specialist (Cyber Engineer) to plan, coordinate, and implement security measures protecting information from unauthorized access, modification, or disclosure.

The role focuses on vulnerability management, information protection policies, audits, risk assessments, and incident response, working with cross-functional teams to meet regulatory requirements including NERC CIP, SOX, and PCI.

Qualifications

• Bachelor's degree in Information Resource Management, Business Computer Systems, Computer Science or Computer Security with 5–7 years related experience.
• Certification in security or systems control: CISSP, CISA, or CISM.
• Experience implementing vulnerability management and information protection programs.
• Experience with audits and regulatory compliance (NERC CIP, SOX, PCI).

Responsibilities

• Develops and maintains Vulnerability Management program across departments.
• Develops and enforces information protection policies and standards.
• Provides training and awareness programs for information protection.
• Coordinates with IS Review Board and Audit Services to address protection issues.
• Manages IS staff and oversees security activities.
• Reports on IS projects and activities to management.
• Collaborates with security admins and IT staff to ensure controls.
• Assists in contingency planning and recovery testing.
• Supports audits for security-related systems and data.

Skills

Vulnerability management

Security policy

Risk assessment

Incident response

Project management

Education

Bachelor's degree in Information Resource Management, Business Computer Systems, Computer Science or Computer Security

CISSP, CISA, or CISM certification

Job description

PNM Resources, Inc. in Albuquerque, NM is seeking an Information Security Specialist (Cyber Engineer) to plan, coordinate, and implement security measures protecting information from unauthorized access, modification, or disclosure.

The role focuses on vulnerability management, information protection policies, audits, risk assessments, and incident response, working with cross-functional teams to meet regulatory requirements including NERC CIP, SOX, and PCI.