Security Controls Architect

American Electric Power; Columbus (OH); On-site; USD 75,000 - 151,000; Full time

Job summary

American Electric Power is seeking a Security Controls Specialist to assess, monitor, and improve cybersecurity controls across the organization. You will partner with Technology, Security, Compliance, Audit, and business stakeholders to identify risk, evaluate control performance, and drive continuous improvement through automation and reporting.

The role performs risk-based assessments, maintains control documentation, and supports audit readiness activities while translating security

Qualifications

• Bachelor’s degree or equivalent in a related field as listed.
• Experience in cybersecurity, risk management, compliance, audit, or security controls management.
• Ability to perform risk analysis and control testing activities.
• Strong written and verbal communication with analytical skills.

Responsibilities

• Execute and maintain security controls to ensure regulatory compliance.
• Evaluate control effectiveness and perform testing/monitoring.
• Develop procedures, standards, and documentation for controls.
• Collaborate with stakeholders to sustain effective controls as systems evolve.
• Support audits, evidence collection, and remediation tracking.

Skills

Cybersecurity

Risk management

Regulatory compliance

Audit readiness

Security controls

Cross-functional collaboration

Communication

Education

Bachelor’s degree in Cybersecurity/IT/CS/related field

Associates degree with 2 years security experience

Equivalent combination of education and experience

Job description

American Electric Power is seeking a Security Controls Specialist to assess, monitor, and improve cybersecurity controls across the organization. You will partner with Technology, Security, Compliance, Audit, and business stakeholders to identify risk, evaluate control performance, and drive continuous improvement through automation and reporting.

The role performs risk-based assessments, maintains control documentation, and supports audit readiness activities while translating security