Technology Risk & Compliance Analyst — Elevate Controls

Alabama Power EnergyPlus; Birmingham (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Southern Company Services in Birmingham or Atlanta seeks a Technology Organization risk and compliance professional to help ensure controls and demonstrate compliance with NERC CIP, TSA SD, and SOX. The role may require occasional overnight travel and is based at either APC Birmingham or GPC Atlanta locations.

You will support risk and control activities, assist with audits, training, and ongoing monitoring, collaborating with multiple teams across the Technology Organization and reporting to

Qualifications

• BS/BA degree in a related field preferred.
• Experience in technology security, internal controls, or risk management preferred.
• Knowledge of compliance frameworks (NERC CIP, SOX) and ServiceNow GRC.

Responsibilities

• Serve as support for technology risk and control activities for internal and external stakeholders related to applicable compliance programs
• Facilitate the execution of the Technology Organization’s patch and vulnerability management review processes in support of compliance with applicable compliance programs
• Support the implementation of new compliance requirements and technology impacting the Technology Organization
• Manage work practices documentation in support of applicable compliance programs
• Facilitate new training opportunities and refresh current training
• Support Senior Staff with the execution of monthly, quarterly, annual, and other periodic control reviews to support compliance with regulatory requirements
• Interact and assist with other departments to report and investigate instances of potential non-compliance, and develop and track associated mitigation plans to completion as necessary
• Work collaboratively with other Compliance Coordinators to meet all team goals, and assist with other compliance issues as workload dictates
• Build and sustain strong working relationships with individuals and workgroups across the Technology Organization and throughout Southern Company
• Perform internal control monitoring and testing of Technology Organization’s compliance programs for applicable compliance programs
• Manage all projects and other assigned responsibilities effectively to meet deadlines

Skills

Technology risk

Compliance frameworks

Audit coordination

Communication skills

Training and mentoring

Education

BS/BA Degree in Computer Science / Information Security / Information Systems or related field

Tools

ServiceNow GRC

Job description

Southern Company Services in Birmingham or Atlanta seeks a Technology Organization risk and compliance professional to help ensure controls and demonstrate compliance with NERC CIP, TSA SD, and SOX. The role may require occasional overnight travel and is based at either APC Birmingham or GPC Atlanta locations.

You will support risk and control activities, assist with audits, training, and ongoing monitoring, collaborating with multiple teams across the Technology Organization and reporting to