Technology Risk & Compliance Specialist

Southern Company; Birmingham, Northern (AL, KY); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Southern Company is seeking a Technology Organization Risk & Compliance Analyst to support risk management and compliance activities within the TO. The role ensures controls are in place and can demonstrate compliance with NERC CIP, TSA SD, and SOX, with occasional overnight travel and locations in Birmingham or Atlanta.

Responsibilities include assisting audits, managing control reviews, and coordinating across departments to report and mitigate non-compliance, while building strong

Qualifications

• BS/BA degree in Computer Science / Information Security or related field preferred.
• Experience in technology security, controls and compliance preferred but not required.
• Familiarity with NERC CIP, TSA SD, and SOX is a plus.

Responsibilities

• Serve as support for technology risk and control activities for internal and external stakeholders related to applicable compliance programs
• Facilitate the execution of the Technology Organization’s patch and vulnerability management review processes in support of compliance with applicable compliance programs
• Support the implementation of new compliance requirements and technology impacting the Technology Organization
• Manage work practices documentation in support of applicable compliance programs
• Facilitate new training opportunities and refresh current training
• Support the Technology Organization efforts during routine audits of applicable compliance programs by both internal and external audit teams
• Support Senior Staff with the execution of monthly, quarterly, annual, and other periodic control reviews to support compliance with regulatory requirements
• Interact and assist with other departments to report and investigate instances of potential non-compliance, and develop and track associated mitigation plans to completion as necessary
• Work collaboratively with other Compliance Coordinators to meet all team goals, and assist with other compliance issues as workload dictates
• Build and sustain strong working relationships with individuals and workgroups across the Technology Organization and throughout Southern Company
• Perform internal control monitoring and testing of Technology Organization’s compliance programs for applicable compliance programs
• Manage all projects and other assigned responsibilities effectively to meet deadlines

Skills

Technology risk management

Compliance frameworks

SOX/NERC CIP familiarity

ServiceNow GRC

Communication skills

Auditing

Education

BS in Computer Science / Information Security

Job description

Southern Company is seeking a Technology Organization Risk & Compliance Analyst to support risk management and compliance activities within the TO. The role ensures controls are in place and can demonstrate compliance with NERC CIP, TSA SD, and SOX, with occasional overnight travel and locations in Birmingham or Atlanta.

Responsibilities include assisting audits, managing control reviews, and coordinating across departments to report and mitigate non-compliance, while building strong