Technology Organization Risk & Compliance Analyst

Southern Company; Atlanta (GA); On-site; USD 85,000 - 110,000; Full time

Job summary

Southern Company seeks a Technology Risk & Compliance Coordinator to support risk and control activities across the Technology Organization. You will assist in compliance with NERC CIP, TSA SD, SOX and related requirements, coordinating with internal/external stakeholders and audit teams.

Located at either the Birmingham APC headquarters or the Atlanta GPC headquarters, the role involves patch/vulnerability review, training facilitation, documentation management, and incident/mitigation

Qualifications

• BS/BA degree in Computer Science, Information Security, Information Systems or related field preferred.
• Experience in technology security, server support or internal controls preferred but not required.

Responsibilities

• Serve as support for technology risk and control activities for internal and external stakeholders related to applicable compliance programs
• Facilitate the execution of the Technology Organization’s patch and vulnerability management review processes in support of compliance with applicable compliance programs
• Support the implementation of new compliance requirements and technology impacting the Technology Organization
• Manage work practices documentation in support of applicable compliance programs
• Facilitate training opportunities and refresh current training
• Support audits by internal and external teams
• Assist with periodic control reviews to meet regulatory requirements
• Report and investigate potential non-compliance and track mitigations
• Collaborate with other Compliance Coordinators to meet team goals
• Build relationships across Technology Organization and Southern Company
• Perform internal control monitoring and testing of compliance programs
• Manage projects to meet deadlines

Skills

Technology risk

Compliance

Audit support

Training facilitation

Stakeholder communication

Analytical skills

Time management

Cross-team collaboration

Risk controls

Education

BS/BA in Computer Science / Information Security / Information Systems

Tools

ServiceNow GRC

Job description

This position will perform support functions in the Technology Organization (TO) risk management and compliance activities for SCS TO organization. The position will help ensure that SCS TO has appropriate controls in place and can demonstrate compliance with internal and external requirements including North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), Transportation Security Administration Pipeline Security Directives (TSA SD), and Sarbanes-Oxley (SOX). Occasional overnight travel may be required. This position is located in either Birmingham at the APC headquarters or in Atlanta at the GPC headquarters location.

Job Responsibilities

• Serve as support for technology risk and control activities for internal and external stakeholders related to applicable compliance programs
• Facilitate the execution of the Technology Organization’s patch and vulnerability management review processes in support of compliance with applicable compliance programs
• Support the implementation of new compliance requirements and technology impacting the Technology Organization
• Manage work practices documentation in support of applicable compliance programs
• Facilitate new training opportunities and refresh current training
• Support the Technology Organization efforts during routine audits of applicable compliance programs by both internal and external audit teams
• Support Senior Staff with the execution of monthly, quarterly, annual, and other periodic control reviews to support compliance with regulatory requirements
• Interact and assist with other departments to report and investigate instances of potential non-compliance, and develop and track associated mitigation plans to completion as necessary
• Work collaboratively with other Compliance Coordinators to meet all team goals, and assist with other compliance issues as workload dictates
• Build and sustain strong working relationships with individuals and workgroups across the Technology Organization and throughout Southern Company
• Perform internal control monitoring and testing of Technology Organization’s compliance programs for applicable compliance programs
• Manage all projects and other assigned responsibilities effectively to meet deadlines

Education Requirements

• BS/BA Degree in Computer Science / Information Security/ Information Systems or related field preferred

Experience Requirements

• Prior Technology Security, Server Support and/or internal controls experience not required but preferred

Preferred Areas Of Knowledge

• Technology controls and processes
• Compliance frameworks
• ServiceNow GRC
• Knowledge of power utility equipment and Cyber Assets associated with the Bulk Power System

Skills Desired

• Positive attitude, team player & creative problem-solving skills
• Detail oriented while working in a fast-paced environment
• Strong oral and written communication skills with ability to communicate effectively at all levels
• An ability to effectively influence others with an emphasis on collaborating across multiple teams and ensuring program needs are satisfied through interpersonal and trusted communication
• Strong analytical skills
• Effective time management skills and good business judgment
• Able to multi-task and handle multiple projects simultaneously
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• Ability to understand deep technical concepts and translate those concepts to non-technical people
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business
• Ability to understand, gather and assess information as done in internal audits, investigations, peer reviews, QA reviews, etc.
• Ability to identify connections between various technology, process, initiatives, and standards.
• Union/Covered: No

About Southern Company

Southern Company (NYSE: SO ) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers’ and communities’ needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com .

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf . Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant’s qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 21151

Job Category: Information Technology

Job Schedule: Full time

Company: Southern Company Services