InfoSec GRC Leader: Governance & Risk Management

Consolidated Edison Company of New York; New York (NY); On-site; USD 180,000 - 230,000; Full time

Job summary

Consolidated Edison Company of New York seeks a System Manager, Information Security to lead InfoSec governance, risk, and compliance across the enterprise. You will shape standards, manage risk programs, and drive regulatory alignment while communicating cyber posture to executives.

The role requires strong leadership, project management, and the ability to collaborate with IT, OT, Legal, Risk, Operations, and external regulators.

Qualifications

• Masters degree with 6+ years IT or utility experience, incl. GRC
• Bachelor's degree with 8+ years IT or utility experience, incl. GRC
• Strong project management and policy development experience
• Excellent written and verbal communication, leadership and stakeholder engagement
• Experience with regulatory requirements and industry standards (e.g., NERC CIP, TSA)

Responsibilities

• Oversee development and maintenance of information security policies and governance frameworks
• Manage enterprise information security risk programs and governance processes
• Lead information security programs focusing on stakeholder engagement and third-party risk
• Direct a team of GRC professionals to achieve business objectives
• Provide executive reporting on cybersecurity posture and resilience metrics

Skills

GRC

Policy development

Project management

Communication

Leadership

Education

Master's degree

Bachelor's degree

Tools

MS Excel

MS Word

PowerPoint

Job description

Consolidated Edison Company of New York seeks a System Manager, Information Security to lead InfoSec governance, risk, and compliance across the enterprise. You will shape standards, manage risk programs, and drive regulatory alignment while communicating cyber posture to executives.

The role requires strong leadership, project management, and the ability to collaborate with IT, OT, Legal, Risk, Operations, and external regulators.