Security & Controls Lead, US Utilities
US, Indianapolis, IN, United States
AES
AES is a global energy company that creates greener, smarter and innovative energy solutions. Together, we can accelerate the future of energy.Are you ready to be part of a company that's not just talking about the future, but actively shaping it? Join The AES Corporation (NYSE: AES), a Fortune 500 company that's leading the charge in the global energy revolution. With operations spanning 14 countries, AES is committed to shaping a future through innovation and collaboration. Our dedication to innovation has earned us recognition as one of the Top Ten Best Workplaces for Innovators by Fast Company in 2022. And with our certification as a Great Place to Work, you can be confident that you're joining a company that values its people just as much as its groundbreaking ideas.
AES is proudly ranked #1 globally in renewable energy sales to corporations, and with $12.7B in revenues in 2023, we have the resources and expertise to make a significant impact as we provide electricity to 25 million customers worldwide. As the world moves towards a net-zero future, AES is committed to meeting the Paris Agreement's goals by 2050. Our innovative solutions, such as 24/7 carbon-free energy for data centers, are setting the pace for rapid, global decarbonization.
If you're ready to be part of a company that's not just adapting to change, but driving it, AES is the place for you. We're not just building a cleaner, more sustainable future - we're powering it. Apply now and energize your career with a true leader in the global energy transformation.
Job Summary: The Security and Controls Lead will be responsible for leading the digital governance, risk, and compliance (GRC) functions within AES’ electric utility digital operations in Indiana and Ohio. This role will ensure that the company adheres to all Digital policies and industry standards with a particular emphasis on compliance. The Security and Controls Lead will work closely with various departments to develop and implement effective compliance programs, risk management strategies, and governance frameworks.
Key Responsibilities:
- Compliance Management: Ensure the company complies with all relevant Digital regulations, standards, and internal policies. Develop and maintain compliance programs, plan and conduct regular audits, and manage compliance reporting.
- Risk Management: Identify, assess, and mitigate risks across the Digital organization. Develop risk management strategies and frameworks, conduct risk assessments, and monitor risk mitigation activities.
- Governance: Develop and implement Digital governance frameworks to ensure effective decision-making and accountability. Establish policies and procedures, and ensure they are communicated and adhered to across the organization.
- Audit and Reporting: Conduct regular audits to ensure compliance with Digital requirements and internal policies. Track progress, prepare and present compliance and risk management reports to key internal stakeholders.
- Training and Awareness: Develop and deliver training programs to educate employees on compliance requirements, risk management practices, and governance frameworks. Promote a culture of compliance and risk awareness across the Digital organization.
- Collaboration: Work closely with various departments, including legal, finance, Digital, and operations, to ensure a coordinated approach to compliance, risk management, and governance. Provide guidance and support to business units on compliance and risk-related matters.
- Continuous Improvement: Lead the identification, prioritization and inclusion of AES systems and processes to be covered by GRC and ITGC scope to broaden control and compliance. Continuously monitor and improve the Digital GRC processes and frameworks to ensure they remain effective and aligned with best practices and regulatory requirements.
Qualifications & Skills:
- Bachelor's degree in Business, Finance, IT, Engineering or a related field.
- Professional certifications (e.g., CISA, CRISC, CISM) are not required, but desired.
- Minimum of 3 years of experience in governance, risk, and compliance roles, preferably within the electric utility sector or similar regulatory environment.
- Strong knowledge of regulatory requirements, industry standards, and best practices related to governance, risk management, and compliance.
- Excellent analytical, problem-solving, and decision-making skills.
- Self-starter with strong communication and interpersonal skills and the ability to work effectively with stakeholders at all levels of the organization.
- Experience in developing and delivering training programs on compliance and risk management topics.
- Accomplished user of Microsoft business tools including Excel, PowerPoint, Word, SharePoint and Office 365.
- Experience in using GRC software and tools (e.g. ServiceNow GRC, SAP GRC, Audit Board, Workiva) is desired, but not mandatory.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: AES Audits CISA CISM Compliance CRISC Finance Governance Risk assessment Risk management SAP SharePoint
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.