Systems Manager

The System Manager, Information Security (InfoSec) Governance, Risk & Compliance (GRC), is a leadership role responsible for overseeing information security governance, risk management, compliance, and related strategic programs across the enterprise. Responsibilities include establishing and maintaining frameworks, processes, and capabilities used to identify, assess, manage, communicate, and monitor cybersecurity risk while ensuring alignment with regulatory requirements, industry standards, and business objectives. The successful candidate must be self-motivated, able to work with minimal guidance, possess extensive organizational skills and attention to detail, and drive results.

Responsibilities

Core Responsibilities

• Oversee the development and maintenance of information security policies and governance frameworks aligned with national energy security priorities in compliance with regulatory requirements and industry standards.
• Oversee enterprise information security risk management programs and related governance processes to support informed risk-based decision making.
• Lead and oversee information security programs focused on internal stakeholder engagement, awareness, and external third-party risk considerations.
• Manage team of GRC professionals to achieve business objectives.
• Be accountable for building team capabilities and operational excellence through workforce planning, training, performance management, and enforcing standards to ensure readiness during incidents.
• Collaborate with internal stakeholders (IT, OT, Legal, Risk, Operations) and external partners (regulators, government agencies, industry groups).
• Facilitate incident response planning, exercises, and post-incident reviews to strengthen organizational readiness.
• Provide executive-level reporting, supports incident response planning, and champions a culture of cyber accountability and resilience across the organization.
• Maintain the Companys information security policies, standards, and control frameworks, supporting internal and external audits, and driving continuous improvement of governance and risk management maturity.
• Provide executive-level reporting on cybersecurity posture, compliance status, and resilience metrics.
• Serve as a key liaison between InfoSec, IT, Audit, Legal, peers in InfoSec Compliance, and business stakeholders to ensure security risks are clearly communicated and appropriately governed.
• Aid internal and regulatory compliance efforts, including NERC CIP, TSA, Coast Guard, and other applicable federal and state mandates.
• Facilitate and maintain cyber resilience strategies to ensure continuity of operations during and after cyber incidents.