Security Controls Lead: Risk, Audit & Automation

AEP; Columbus (OH); On-site; USD 75,000 - 151,000; Full time

Job summary

American Electric Power (AEP) seeks a Security Controls Specialist to assess, monitor, and improve cybersecurity controls across the organization. You will partner with technology, security, compliance, audit, and business stakeholders to identify and mitigate risk and strengthen security posture.

You will perform risk-based assessments, develop control documentation, support audits, and drive continuous improvement through automation, metrics, and reporting.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or related field.
• Associate's degree with 2 years relevant security experience; equivalent combo considered.
• Experience in cybersecurity, risk management, compliance, audit, or security controls management.
• Experience performing security assessments, risk analysis, or control testing activities.
• Experience supporting regulatory compliance or audit programs.
• Experience with cross-functional technology and business teams.
• Excellent written and verbal communication with strong analytical and critical-thinking skills.
• Ability to handle sensitive and confidential information.

Responsibilities

• Execute and maintain security controls across administrative, technical, operational, and detective domains.
• Evaluate effectiveness of controls and identify remediation gaps.
• Perform control testing, validation, and monitoring for compliance.
• Develop and maintain control procedures, standards, and documentation.
• Support audits with evidence collection and remediation tracking.
• Collaborate with business and technology teams to keep controls effective as systems evolve.

Skills

Cybersecurity

Risk management

Compliance

Audit support

Security controls

Education

Bachelor's degree

Associate degree + 2 years

Tools

GRC tools

Job description

American Electric Power (AEP) seeks a Security Controls Specialist to assess, monitor, and improve cybersecurity controls across the organization. You will partner with technology, security, compliance, audit, and business stakeholders to identify and mitigate risk and strengthen security posture.

You will perform risk-based assessments, develop control documentation, support audits, and drive continuous improvement through automation, metrics, and reporting.