Senior Manager, Global Information Technology

NovaSource Power Services; Houston (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health Coverage

401(k) with employer match

Paid Time Off

Career Growth

Disability insurance

Job summary

NovaSource Power Services is seeking a Technology GRC Senior Manager to lead governance, risk and compliance for regulated IT/OT environments, translating obligations into practical controls and ensuring audit-ready evidence for NERC CIP and global regulatory requirements.

The role partners with Legal, Compliance, Information Security, IT, OT and business teams to establish clear roles, review cadences and defensible evidence.

Qualifications

• 5+ years in IT/OT governance, risk, compliance or information security.
• Experience with regulated environments and control design.
• Direct NERC CIP experience including evidence management or audits.
• Strong documentation and audit-ready materials.
• Excellent written and verbal communication with technical and senior leadership.

Responsibilities

• Act as IT/OT compliance interface to Legal, Compliance, Information Security, IT, OT and business teams.
• Own governance of technical control design, evidence quality, monitoring and audit-readiness routines.
• Collaborate with control owners to establish roles, review cadence and escalation paths.
• Support NERC CIP compliance activities including evidence management and self-certification.
• Maintain policies, standards, procedures and governance artifacts across IT/OT/security/compliance.
• Embed compliance requirements into change management, incident response and vendor risk processes.
• Assess changes for compliance impact and operational feasibility.
• Build dashboards and reporting to improve leadership visibility and reduce manual evidence collection.
• Support third-party and supply-chain risk management beyond IT/OT.

Skills

IT/OT governance

Regulatory compliance

Audit readiness

Technical controls

Cross-functional communication

Education

Bachelor's degree in a technical field

Tools

GRC platforms

Job description

NovaSource Power Services is the world’s #1-ranked solar operations and maintenance (O&M) provider and insight-driven total asset optimization partner for renewables asset owners ready to fuel smart growth. With over 20 years of operating experience and a presence on 5 continents, NovaSource has the global reach and strategic capabilities to achieve our clients’ renewables goals around the world.

NovaSource’s comprehensive approach to total asset optimization in addition to O&M services includes value engineering, performance analysis, strategic supply chain management, and advanced monitoring systems. The company operates in key global markets managing over 30GW of solar power plants. NovaSource’s expertise extends beyond solar and includes battery energy storage systems (BESS), offering a complete suite of services for the evolving renewable energy landscape.

Position Summary

The Technology GRC Senior Manager leads the technology governance, risk and compliance function for regulated IT/OT environments. This role translates compliance obligations into practical technical controls, maintains audit-ready evidence, and serves the designated technical subject-matter expert (SME) for NERC CIP and Global regulatory electricity compliance (Including Europe, Chile, and Australia) within the technology organization including customer, and supply-chain requirements. The role owns governance and control integrity, while operational teams remain accountable for daily infrastructure, cloud, network, tooling, and OT operations.

Key Responsibilities

• Act as the IT/OT compliance interface to Legal, Corporate Compliance, Information Security, IT, OT and business teams for technology obligations, audits, reviews, and customer commitments.
• Own and govern technical control design, control documentation, evidence quality, control monitoring, remediation, validation, and audit-readiness routines for regulated environments.
• Partner with compliance and operational control owners to establish clear roles, review cadence, escalation paths and defensible evidence for access, change, configuration, vulnerability, malware, logging, and monitoring controls.
• Support NERC CIP compliance activities including evidence management, self-certification, auditor data requests, mitigation tracking, technical attestations and control demonstrations.
• Maintain policies, standards, procedures, exception processes and governance artifacts across IT, OT, security, compliance, and vendor-risk domains.
• Embed compliance requirements into change management, incident response, recovery, access management, data protection, vendor risk and technology lifecycle processes.
• Assess technology, vendor, customer, cloud, SaaS, MSP, software, hardware and OT changes for compliance impact, risk exposure, evidence needs and operating feasibility.
• Build practical workflows, dashboards and reporting that reduce manual evidence collection, improve leadership visibility and escalate compliance gaps or risk acceptance needs.
• Support third-party and supply-chain risk management for applicable technology products and services, including remote access, vulnerability communication, software integrity and vendor assurance expectations.
• Promote a compliance-minded culture through documentation discipline, awareness support, continuous improvement and clear communication with technical and nontechnical stakeholders.

Required Qualifications

• Bachelor's degree in a relevant technical field, or equivalent experience.
• 5+ years in IT/OT governance, risk, compliance, information security, auditor technology risk management, including 3+ years supporting technical controls in regulated environments.
• Direct NERC CIP experience, such as evidence management, audit readiness, self-certification, RFI response, mitigation tracking or compliance program coordination.
• Working knowledge of IT/OT security, including segmentation, access, change/configuration, vulnerability, patch, malware prevention, logging, monitoring and recovery controls.
• Understanding of OT operating constraints, including availability priorities, legacy systems, real-time operations and controlled change windows.
• Strong documentation discipline with the ability to produce operationally usable and audit-defensible materials.
• Strong written and verbal communication skills; able to translate technical implementation and compliance requirements for engineers, legal, compliance and senior leadership.

Preferred Qualifications

• Experience in renewable generation, storage, remote monitoring or industrial control environments.
• Relevant certifications such as GICSP, CISSP, CCNP/CCNA, Security+, CISM or equivalent.
• Experience preparing for or supporting NERC CIP audits, self-certifications or regulatory reviews.
• Familiarity with supply-chain, remote access, internal monitoring and governance/control frameworks such as NIST CSF, NIST 800-53, IEC 62443, ITIL, ISO 31000 or similar.

Benefits

• Competitive Pay + Paid Time Off (PTO).
• Quarterly Bonus Program: Performance-based incentive opportunities.
• Health Coverage: Comprehensive and affordable medical, dental, and vision plans effective on your first day.
• Flexible Spending & Health Savings Accounts (FSA/HSA): Options to help you save on healthcare costs.
• Career Growth: On-the-job training with a clear path for advancement.
• Income Protection: Company-paid short-term and long-term disability insurance.
• Legal Support: Access to legal assistance services.
• Employee Assistance Program (EAP): Confidential counseling and support resources.
• Retirement Savings: 401(k) plan with employer matching contributions.
• Additional Perks: Pet insurance and more employee benefits.

Office Physical Requirements

All positions in our office require interaction with people and technology while either standing or sitting. In order to best service our customers, internal and external, all associates must be able to communicate face-to-face and on the phone with or without reasonable accommodation. NovaSource is committed to compliance with its obligations under all applicable state and federal laws prohibiting employment discrimination. In keeping with this commitment, it attempts to reasonably accommodate applicants and employees in accordance with the requirements of the disability discrimination laws. It also invites individuals with disabilities to participate in a good faith, interactive process to identify reasonable accommodations that can be made without imposing an undue hardship.

Potential candidates will meet the education and experience requirements provided on the above job description and excel in completing the listed responsibilities for this role.

US: Diversity Statement – Equal Employment Opportunity

It is NovaSource’s policy to provide equal employment opportunities to all applicants and employees. NovaSource disapproves of, and will not tolerate, unlawful discrimination against any applicant or employee because of race, color, national origin or ancestry, gender (including pregnancy, childbirth, or related medical conditions), gender identity, age, religion, disability, family care status, veteran status, marital status, sexual orientation, or any other basis protected by local, state or federal laws.