Sr Mgr Security (Enterprise AI)

Consumers Energy; Jackson (MI); Hybrid; USD 130,000 - 185,000; Full time

Benefits offered by this job

Competitive compensation

Medical, Dental, Vision

401k with company match

Parental leave

Paid holidays

Job summary

Consumers Energy is seeking a Senior Manager of Security to lead and advance the company’s security strategy across operations, IAM, risk, privacy, and compliance. This senior leader will shape policies, oversee incident response, and drive continuous improvement while mentoring a growing security team.

The role requires strategic vision, strong collaboration with IT, Legal, and regulators, and a focus on resilience, AI governance, and data protection across all business units.

Qualifications

• Bachelor’s degree in a related field required; seven or more years in security/IT disciplines.
• Experience leading security programs, risk management, and regulatory compliance.
• Strong communication, leadership, and cross-functional collaboration skills.

Responsibilities

• Define and implement the organization’s security strategy aligned with objectives and regulatory requirements.
• Serve as primary escalation point for significant security incidents and coordinate cross-team responses.
• Identify, assess, and mitigate security risks while maintaining privacy and compliance.
• Stay current on threats and technologies; incorporate new tools and methods into security programs.
• Oversee and manage multiple security functions including operations, engineering, IAM, and risk management.
• Mentor and develop security staff; promote DE&I and accountability within the team.
• Lead enterprise AI and intelligent automation strategy, governance, and roadmaps.

Skills

Security leadership

Incident response

Identity and access management

Risk management

Regulatory compliance

Strategic planning

Communication

Mentoring

Education

Bachelor’s degree in a related field

Associate’s degree in a related field

High School Diploma/GED

Tools

CSIRT

NIST/NERC CIP/PCI frameworks

Job description

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.

This position is not eligible for immigration sponsorship, e.g., H-1B, TN, etc. Please do not apply if you will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B, TN, etc., now or in the future. We are unable to hire individuals with CPT, OPT, or STEM OPT for this position as the position is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship for a work visa.

Location

This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

General Summary Of Job Responsibilities

The Senior Manager of Security is responsible for overseeing and advancing the organization’s security strategy across security operations, engineering, Identity and Access Management (IAM), risk management, privacy, networking, and compliance. This role provides strategic leadership, technical expertise, and operational oversight to protect the organization’s assets, data, and infrastructure. The Senior Manager leads the execution of complex security initiatives, manages enterprise-level risk, and strengthens the organization’s overall security posture through proactive defense, regulatory compliance, and continuous optimization of security programs.

The Senior Manager of Security serves as a senior leader within the Security team, shaping security policies, ensuring regulatory compliance, and leading responses to significant security incidents. This role fosters strong collaboration with internal and external stakeholders, promotes a strong security culture across the organization, and mentors and develops security professionals to achieve business-aligned security objectives.

Essential Duties And Responsibilities

• Define and implement the organization’s overall security strategy, ensuring alignment with business objectives, industry standards, and regulatory requirements while promoting continuous improvement across all security functions.
• Serve as the primary escalation point for significant security incidents, ensuring timely and effective response, remediation, and coordination across teams during major events or disruptions.
• Ensure the identification, assessment, and mitigation of security risks while maintaining adherence to privacy laws, data protection standards, and regulatory compliance frameworks across all security domains.
• Maintain awareness of emerging security threats, technologies, and industry best practices, incorporating new tools, technologies, and methodologies into the security program to continuously strengthen the organization’s security posture.
• Perform other non-essential duties as assigned or as necessary.
• Manage workload demands, resource allocation, budgeting, and capital planning across security functions while tracking key performance indicators (KPIs) and metrics to measure program effectiveness and operational efficiency.
• Mentor, coach, and develop team members, fostering a culture of continuous learning, professional growth, diversity, equity, and inclusion (DE&I), and accountability to support a high-performing and empowered security team.
• Oversee and manage one or more security functions, including:
• Security Operations and Incident Response, such as CSIRT, threat detection, monitoring, proactive threat hunting, and forensic analysis;
• Security Engineering and Identity and Access Management, including the design, implementation, and maintenance of security technologies, automation, identity provisioning, authentication, authorization, and governance;
• Network and Connectivity, including routing, switching, firewalls, and data transfer; or
• Risk Management, Privacy, and Compliance, including risk assessments, privacy programs, regulatory compliance frameworks such as NIST, NERC CIP, and PCI, and audit adherence. Ensure organizational resilience through effective Business Continuity and Disaster Recovery planning and execution.
• Build and maintain strong relationships with internal and external stakeholders, including executive leadership, IT, Legal, Compliance, vendors, auditors, and regulatory bodies. Represent the organization in industry forums and regulatory discussions, as appropriate.
• Lead continuous improvement initiatives using frameworks such as CMMI and Lean, oversee documentation processes, and contribute to long-term security roadmaps, strategic planning, and financial initiatives that support organizational goals and strengthen the organization’s security posture.
• Define and execute the enterprise AI and intelligent automation strategy, establishing the platforms, standards, governance, and roadmap required to responsibly scale AI, automation, and orchestration across the organization.
• Lead the delivery of enterprise AI enablement capabilities, including reusable AI services, intelligent automation, integrations, development patterns, and self-service capabilities that enable teams to securely build, deploy, and consume AI solutions.
• Drive adoption and measurable business outcomes by partnering with business and technology teams to advance prioritized AI and automation opportunities from concept through production, reduce friction and manual work, and accelerate enterprise-wide adoption.

Knowledge/Skills/Abilities

• Exceptional verbal and written communication skills, with the ability to articulate complex security concepts to diverse audiences, including executive leadership, technical teams, and non-technical stakeholders at all levels of the organization.
• Strong interpersonal and relationship-building skills, with the ability to lead cross-functional teams, collaborate effectively across departments, and build consensus around security initiatives and priorities.
• High level of emotional intelligence, with the ability to effectively manage team dynamics, foster psychological safety, and create an inclusive environment that encourages diverse perspectives.
• Strong commitment to employee development, with a demonstrated track record of mentoring, coaching, and guiding team members in their career development while supporting professional growth and succession planning.
• Demonstrated ability to collaborate effectively and embody the principles of being humble, hungry, and people smart.
• Proven ability to develop and execute comprehensive security strategies aligned with organizational goals while appropriately balancing risk management, operational requirements, and business objectives.
• Demonstrated ability to make sound, data-driven decisions under pressure, particularly during security incidents or crises, while effectively balancing immediate response needs with long-term strategic considerations.
• Expertise in leading organizational change, particularly within security programs, with the ability to manage resistance, drive adoption of new processes and technologies, and promote a culture of continuous improvement.
• Ability to evaluate and prioritize security risks within the broader context of business operations, ensuring resources are allocated effectively and organizational risk tolerance levels are appropriately maintained.

Education/Experience

• Bachelor’s degree in a related field and seven (7) or more years of experience in one or more security or IT disciplines, such as Asset Management, Automation, Compliance, Identity and Access Management, Network Engineering and Operations, Incident Response, IT Infrastructure and Architecture, Network and Security Operations, Privacy, Risk Management, or Security Engineering
• [OR] Associate’s degree in a related field and nine (9) or more years of experience in one or more of the security or IT disciplines listed above
• [OR] High School Diploma/GED and eleven (11) or more years of experience in one or more of the security or IT disciplines listed above

Why should you join our team?

At Consumers Energy, we offer more than just a place to work. We foster a culture that supports career development, growth, and stability, and we take pride in offering our co-workers excellent benefits and compensation packages. We are deliberately creating an inclusive culture that makes our diverse team of co-workers feel valued, supported, and empowered every day. We're a company made up of thousands of people, all with different stories to share and work to do, but we stand united in our company purpose: world class performance delivering hometown service.

What We Offer

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Diversity, Equity & Inclusion

We, at CMS Energy, value Diversity, Equity, & Inclusion. It is part of our DNA. We treat our employees with respect, we treat each other fairly and we value the opinions of others. We are passionate about building and nurturing an environment where everyone feels included. We don’t discriminate. We seek to learn about each other and better understand our unique differences. Our uniqueness makes us authentic. We create safe spaces where everyone can be who they truly are. We invite difficult conversations and uncomfortable topics. We value diverse perspectives; this is what makes us great together. We harbor an inclusive environment where employees feel empowered to share their backgrounds, experiences, and ideas. Our Employee Resource Groups, Women in Energy (WE), Minority Advisory Panel (MAP), Pride Alliance of Consumers Energy (PACE), GENERGY (Different Generations), capable (Different Abilities), Interfaith, People Planet Partners, and Veterans Advisory Panel (VAP) are key enablers to living the values of our company culture: Caring, Empowered, Deliberate, Agility, and Ownership.

All qualified applicants will not be discriminated against and will receive consideration for employment without regard to protected veteran status, disability, race, color, religion, sex, age, sexual orientation, gender identity or national origin.