Security Controls & Compliance Specialist

aep; Columbus (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

American Electric Power is seeking a Security Controls Specialist to assess, monitor, and improve cybersecurity controls across the organization. You will partner with Technology, Security, Compliance, Audit, and business stakeholders to identify and mitigate risk and strengthen overall security posture.

The role conducts risk-based assessments, maintains control documentation, evaluates control effectiveness, supports audit readiness, and drives automation, metrics, and reporting to drive

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field.
• Associate's degree with 2 years relevant experience in security (cyber or physical).
• Equivalent combination of education and relevant experience may be considered.
• Experience in cybersecurity, risk management, compliance, audit, or security controls management.
• Experience performing security assessments, risk analysis, or control testing activities.
• Experience supporting regulatory compliance or audit programs.
• Experience working with crossFunctional technology and business teams.

Responsibilities

• Security Controls Management: Execute and maintain administrative, technical, operational, and detective security controls; evaluate effectiveness; test and monitor for compliance; develop procedures and documentation; identify gaps and remediation; support new controls and improvements; collaborate with teams as systems evolve.
• Compliance & Audit Readiness: Support audits with evidence, maintain audit-ready docs, assist with regulatory activities, review controls for ongoing compliance, and participate in remediation tracking.
• Monitoring, Metrics & Reporting: Develop security control metrics and dashboards; analyze trends; automate evidence collection; produce risk and compliance reports; develop repeatable KPIs.
• Stakeholder Engagement: Liaise between cybersecurity, OT, tech support, and business stakeholders; provide guidance on security requirements and risk mitigation; educate on processes and compliance; support projects with security requirements.

Skills

Communication

Analytical thinking

Cross-functional collaboration

Security controls understanding

Risk management

Education

Bachelor's degree in Cybersecurity, IT, CS, Risk Management, Business

Associate's degree with 2 years security experience

Job description

American Electric Power is seeking a Security Controls Specialist to assess, monitor, and improve cybersecurity controls across the organization. You will partner with Technology, Security, Compliance, Audit, and business stakeholders to identify and mitigate risk and strengthen overall security posture.

The role conducts risk-based assessments, maintains control documentation, evaluates control effectiveness, supports audit readiness, and drives automation, metrics, and reporting to drive