Sr Security Compliance Analyst

CMS Energy, Corp.; Michigan; Hybrid; USD 65,000 - 95,000; Full time

Job summary

An established industry player is seeking a Senior Security Compliance Analyst to manage compliance activities for various regulatory requirements. This hybrid role offers the opportunity to work both onsite and virtually, ensuring that compliance controls are designed and monitored effectively. The ideal candidate will have a strong background in IT audit and compliance, with the ability to lead teams and communicate effectively with stakeholders. Join a company that values diversity and fosters a culture of growth and stability, where your contributions will make a significant impact on the organization and its commitment to delivering reliable energy services.

Benefits

Competitive compensation packages

Medical, Dental and Vision

401k with company match

Paid parental leave

Up to 13 paid Holidays

Paid time off

Educational Assistance Program

Qualifications

• 4+ years in IT audit/compliance role with regulatory experience.
• Strong understanding of compliance controls and audits.

Responsibilities

• Manage compliance activities for regulatory requirements.
• Document and review work procedures for compliance.

Skills

Leadership

Cyber Security Technologies

Communication

Project Management

Regulatory Compliance

Education

Bachelor's Degree in Information Technology

Associate's Degree in Information Technology

High School Diploma

Job description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert: Create Alert

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.

Location: This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

The Senior Security Compliance Analyst will manage compliance activities for one or more regulatory requirements such as NERC-CIP, PCI, FERC Hydro, TSA, API-1164, MARSEC, and NRC. The incumbent will design and monitor compliance controls and related tasks, audit preparation and participation, assessments, small projects, tracking weekly progress by utilizing the compliance database, and tracking defect resolution. Partner with other teams as necessary for a variety of needs including project management, process mapping/creation, security awareness, risk, and privacy.

Essential Duties and Responsibilities

• Able to step in as team lead when necessary and build consensus on what direction the team should follow and mentor/train others on the team.
• Review potential non-compliances by investigating what occurred vs what was intended and conducting conversations with key party(ies) to arrive at the true nature and extended impact of the incident.
• Document results in the correct forms and review with relevant directors, legal representatives, and external regulators.
• Actively participate in Daily/Weekly/Monthly operating reviews so that all work is known and transparent.
• Expected to be ready to intelligently talk about their daily/weekly/monthly workload, deadlines, expectations, hurdles, and any problems that need to be surfaced so that the work can be addressed appropriately.
• Document and review step-by-step work procedures to create Standard Work for the functions that you perform. Standard Work will be used by multiple analysts throughout the broader Security team, and will be reviewed by regulators (federal and others) multiple times per year as evidence of our compliance program.
• Talk to auditors and represent the company utilizing expertise in our processes, procedures, and control environment. Demonstrate our layered security approach in a concise and confident manner.
• Perform compliance tasks prescribed in the Compliance Database system to ensure we can evidence compliance activities completed to our regulators (federal, local, governmental). Ensure that the evidence is correct and complete.
• Apply knowledge of IT audit and compliance based on prior experience to our current workload and incoming work to arrive at decisions and solutions that are best for the company. Regularly meet with required stakeholders to discuss and review any questions that come up regarding compliance topics, so decisions and action items are documented and followed through.
• Perform remediation analysis and activities by reviewing solution(s) with required stakeholders (Operational Technology, IT, regulatory analysts, Corporate Security, etc.) to demonstrate non-compliances have been remediated. Document results in the correct forms and review with relevant directors, legal representatives, and external regulators.
• Other duties as assigned or may be necessary.

Knowledge/Skills/Abilities

• Demonstrated leadership-type capabilities.
• Technical skills required relating to cyber and physical security technologies.
• Strong communicator both internally and externally.
• Able to create and maintain visual management and status updates that can be shared broadly with all levels of employees/leadership.
• Able to function as a project manager for compliance-based projects by utilizing professional judgement for scope, budget, and timing.
• Understanding of critical infrastructure security issues.

Education & Experience

• Bachelor's Degree in Information Technology, Computer Science or related field with 4years of experience in IT audit / compliance type of role, experience conducting and receiving audits, interacting with auditors and managing remediation plans; Experience in regulatory compliance including controls development, regulatory analysis, process development, audits, automation and technical capabilities [OR]
• Associate'sDegree in Information Technology, Computer Science or related field with 6years of experience in IT audit / compliance type of role, experience conducting and receiving audits, interacting with auditors and managing remediation plans; Experience in regulatory compliance including controls development, regulatory analysis, process development, audits, automation and technical capabilities [OR]
• High School Diploma and/or GED with 8 yearsof experience in IT audit / compliance type of role, experience conducting and receiving audits, interacting with auditors and managing remediation plans; Experience in regulatory compliance including controls development, regulatory analysis, process development, audits, automation and technical capabilities

Why should you join our team?

At Consumers Energy, we offer more than just a place to work. We foster a culture that supports career development, growth, and stability, and we take pride in offering our co-workers excellent benefits and compensation packages. We are deliberately creating an inclusive culture that makes our diverse team of co-workers feel valued, supported, and empowered every day. We're a company made up of thousands of people, all with different stories to share and work to do, but we stand united in our company purpose: world class performance delivering hometown service.

What we offer:

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Diversity, Equity & Inclusion:

We, at CMS Energy, value Diversity, Equity, & Inclusion. It is part of our DNA. We treat our employees with respect, we treat each other fairly and we value the opinions of others. We are passionate about building and nurturing an environment where everyone feels included. We don’t discriminate. We seek to learn about each other and better understand our unique differences. Our uniqueness makes us authentic. We create safe spaces where everyone can be who they truly are. We invite difficult conversations and uncomfortable topics. We value diverse perspectives; this is what makes us great together. We harbor an inclusive environment where employees feel empowered to share their backgrounds, experiences, and ideas. Our Employee Resource Groups, Women in Energy (WE), Minority Advisory Panel (MAP), Pride Alliance of Consumers Energy (PACE), GENERGY, capABLE, Interfaith and Veterans Advisory Panel (VAP) are key enablers to living the values of our company culture: Caring, Empowered, Deliberate, Agility, and Ownership.

All qualified applicants will not be discriminated against and will receive consideration for employment without regard to protected veteran status, disability, race, color, religion, sex, age, sexual orientation, gender identity or national origin.

Job Segment: Compliance, Law, Computer Science, Database, Equity, Legal, Technology, Finance

Consumers Energy is an Equal Opportunity Employer, please review our Equal Employment Opportunity Policy, Family and Medical Leave Act, and Military Leave Allowance. CMS Energy endeavors to make https://careers.consumersenergy.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact our team at [e-mail]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. ACCOMMODATION NOTICE: Federal law and many state laws require employers to make accommodations to disabled applicants and employees where the accommodation does not impose an undue hardship on the employer. For those applicants seeking a position within the State of Michigan, a disabled individual needing accommodation for employment must notify the employer in writing within 182 days after the need is known or should have been known. Michigan law provides that failure of a Michigan employee to properly notify the employer will preclude any claim that the employer failed to accommodate the disabled individual. However, this does not waive an individual’s right under the Americans with Disabilities Act of 1990, as amended, which sets no time limit for requesting an accommodation nor does it require such accommodation to be in writing.