Manager, Crisis Management & Resilience

PNM Resources; Albuquerque (NM); On-site; USD 110,000 - 187,000; Full time

Job summary

PNM Resources in Albuquerque, NM, is seeking a Manager, Crisis Management & Resilience to lead enterprise incident response, business continuity, and emergency management programs. You will coordinate cross-functional teams, design exercises, and advance governance and training to improve resilience.

The role requires experience in incident response, planning, and policy development, with a focus on measurable outcomes and regulatory compliance.

Qualifications

• Bachelor's degree in a related field with seven to nine years related experience, or equivalent.
• Professional certification preferred (e.g., CISSP, CISA, Business Continuity).
• Master's degree preferred.

Responsibilities

• Oversees Incident Response, Business Continuity, Emergency Management/Operations programs.
• Designs and coordinates Incident Response, Business Continuity, and Disaster Recovery exercises.
• Develops and maintains training programs on incident response and business continuity.
• Establishes relationships with government and private sector stakeholders for continuity planning.

Skills

Leadership

InfoSec basics (NIST/ISO)

Risk assessment

Policy development

Cross-functional leadership

ServiceNow

Education

Bachelor's degree in related field

Master's degree preferred

Tools

ServiceNow

Job description

POSTING DEADLINE

This position is posted until filled. This role can sit out of Albuquerque, NM or out Texas locations in Lewisville & Texas City

DEPARTMENT

Department: Crisis Management and Resilience

PREFERENCES

We're seeking a leader who can help transform organizational resilience from a collection of plans and processes into an integrated, technology-enabled business capability. This position will play a key role in advancing enterprise incident management, business continuity, all-hazards preparedness, and operational resilience programs through the development of governance, workflows, training, exercises, and continuous improvement initiatives. The successful candidate will have a demonstrated track record implementing sustainable programs, leveraging technology platforms such as ServiceNow to institutionalize capabilities, and leading cross-functional teams through complex incidents and organizational change. The ideal candidate is equally comfortable building strategy, facilitating executive discussions, designing operational processes, and driving implementation to measurable outcomes.

JOB DESCRIPTION

Manager, Crisis Management & Resilience

Salary Grade: G04
MinimumMidpointMaximum
$110,004- $148,506- $187,007

This position is covered by NERC CIP cyber security standards. Prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training. Annual cyber security training is also required.

SUMMARY

Leads, plans, coordinates, trains, & manages Incident Response, Business Continuity, Emergency Management/Operations programs. Coordinates a wide array of stakeholders in affected departments & business units to effectively enhance organizational resiliency, prepare for, maintain continuity & respond to a wide variety of crises, incidents, disasters, and events, and establish and oversee implementation of corrective actions, develop policies, plans, & program activities.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Oversees the Business Continuity, Emergency Management/Operations, Incident Response Programs
• Designs and/or coordinates Incident Response, Business Continuity, and Disaster Recovery exercises and drills with internal and external groups and participates as an active member of other regional and national training exercises
• Develops, implements, presents, maintains, and coordinates the appropriate training programs in conjunction with the corporate training department regarding incident response, business continuity, and disaster recovery
• Establishes and maintains relationships with federal, state, and local government representatives, comparable private sector colleagues, business operating units and internal stakeholders responsible for related business continuity plans and specific aspects of business continuity, disaster recovery, and incident response such as Corporate Security, Facilities, Risk Management, Human Resources, Legal, Operations, and Compliance
• Maintains and ensures timely updates of all appropriate documentation including Incident Response and Business Continuity policies, plans, on-call lists, regulatory compliance evidence, and after-action reviews
• Leads and manages all aspects of incidents, disasters, emergencies, and crises from identification, containment, investigation, eradication, reporting, recovery, and all necessary follow-up activities
• Assembles, leads, and collaborates with cross-functional matrixed response teams and actively commands incidents/crises to achieve successful outcomes while maintaining continuity/resilience to the greatest extent possible
• Acts as primary subject matter expert for cyber security incident response and associated emergency operations regulatory compliance
• Maintains personal competency in related technology applications, engages in constant improvement by taking advantage of available cost-effective training opportunities
• Develops and presents information to promote incident response preparedness & resiliency as core values
• Regularly consumes and communicates relevant threat intelligence
• Other duties as assigned

COMPETENCIES

• In-depth management, negotiation, technical skills, and demonstrated leadership and customer service skills
• Ability to utilize working knowledge of information security best practices such as: NIST 800 series, ISO 27000 series, ISA, or COBIT
• Excellent skills in risk assessment processes, policy development, proposals, work statements, product evaluations, and delivery of technology
• Ability to understand enterprise business computing operations/requirements, and fundamental power generation operations
• Knowledge of crisis management, business continuity, emergency management, incident analysis, and incident response management
• Demonstrated skills in personnel management, budget management, and conflict management
• Be an action-oriented, detail-oriented, goal-oriented self-starter with the ability to multi-task, effectively manage time, manage shifting priorities, and thrive in a complex, dynamic, fast-paced, ambiguous, and sometimes chaotic environment
• Ability to organize and distill complex technical concepts into simple and easy to understand instructions and action items during an incident

QUALIFICATIONS

MINIMUM EDUCATION AND/OR EXPERIENCE

Bachelor's degree in a related field with seven to nine years related experience, or equivalent combination of education and/or experience related to the discipline.

Related professional certification preferred (e.g., CISSP, CISA, Business Continuity Professional, Certified Incident Handler, etc.).

Master's degree preferred.

SUPERVISORY RESPONSIBILITIES

Hires, trains, evaluates, rewards, and terminates employees. Designs, organizes, prioritizes, schedules, and leads work assignments. Fosters good working relationships with various groups. Appraises performance, rewards and disciplines employees, addresses complaints, and resolves problems. Indirectly supervises and guides enterprise employees, contractors, and electronic system users for performance of job functions in accordance with incident response & disaster recovery scope.

COMMUNICATION SKILLS

• Ability to respond effectively to highly sensitive inquiries or complaints
• Ability to effectively give persuasive speeches and presentations on controversial or complex topics to various audiences
• Ability to read and interpret complex documents such as safety rules, operating and maintenance instructions, and procedure manuals
• Ability to write complex reports, regulatory documents, policies and correspondence
• Ability to speak effectively before a broad range of groups of stakeholders, business partners, and employees in all areas of the organization
• Read, analyze, interpret, and gather relevant technical procedures, confidential information, threat intelligence, business periodicals, professional journals, cooperative directives, procedures, or governmental regulations

MATHEMATICAL SKILLS

Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume

COMPUTER SKILLS

• In-depth knowledge and experience with mainframe and client/server applications, computer networks, and information security concepts and issues
• Strong working knowledge of current marketed security tools and technologies
• Strong working knowledge of industry regulations (NERC CIP, Sarbanes Oxley, PCI) and industry security standards (NIST, ISO)
• Strong working knowledge of malware and network analysis and investigation preferred
• Strong, working knowledge of the latest Microsoft Office Suite

ANALYSIS AND PROBLEM-SOLVING ABILITY

Ability to strategically approach issues. Ability to be proactive, adept at working with cross-functional teams and stakeholder groups. Ability to synthesize complex information. Ability to apply creativity to problem solving and utilize analytic skills and modeling capabilities to provide ongoing insight into the business and to make recommendations and decisions. Ability to identify and develop remediation or mitigation plans as necessary. Ability to coordinate with, and lead, cross-functional team of technical experts.

DECISION MAKING

Conducts and guides enterprise incident response and disaster recovery project and operations activities and practices within the bound of approved security programs and policies, and in accordance with generally accepted security standards.

SCOPE AND IMPACT

Protects all enterprise computing and operational platforms for the purpose of providing and preserving confidentiality, integrity, and availability of all enterprise systems, applications, and data. Protection and recovery of systems is intended to minimize potential costs directly related to operational, legal, regulatory, and reputation risk from loss of enterprise system operation or confidential or proprietary information. Failure to protect and recover systems in a timely manner from an incident exposes company to heightened regulatory oversight, monetary sanctions, increased expense, and loss of production revenue.

PHYSICAL DEMANDS

While performing the duties of this job, the employee is frequently required to stand, sit, and/or walk up to 2/3 of the time. The employee must occasionally lift and/or move up to 30 pounds. Ability to stoop, kneel, crouch, or crawl. Manual dexterity is required to perform computer applications and good vision is required to perform all aspects of the job. May require long periods of time in conference or meeting when one is required to talk and/or listen. Required to be on call 24-hours a day for emergencies. Out-of-state travel is occasionally required.

WORK ENVIRONMENT

Office environment or remote as needed.

SAFETY AND ADA STATEMENT

Safety Statement:
Safety is a core value at (TXNM Energy/PNM/TNMP) and our vision, "everyone goes home safe", reflects our commitment to promoting an environment conducive to learning, improving and building safety practices. Our safety value is built upon the belief that every employee deserves to work in an environment free from harm.

Americans with Disabilities Act (ADA) Statement:
If you require assistance with the job application process due to a disability, please contact HR ADA Analyst, at 505-241-4627.

Equal employment opportunity, including veterans and individuals with disabilities.

PI287034121