IT Supervisor, Risk and Compliance

Role and Scope of Position:
The IT Governance, Risk and Compliance Supervisor is involved in planning, implementing and managing the governance and risk management frameworks for Information Technology, reporting from within the IT Security, Network and Compliance Organization. They are responsible for ensuring that the IT systems align with business objectives, and adhere to regulatory and legal requirements. A key focus is on managing third party risk through overseeing and operating the Vendor Risk Mangement Program.

Essential Functions:

• Developing, implementing, and overseeing the strategic IT governance program within the organization
• Identifying and managing IT risks, developing risk management strategies, and implementing action plans to mitigate risks
• Ensuring IT systems and processes are compliant with relevant laws, regulations, and standards
• Monitoring changes in legislation and accreditation standards that affect IT and making necessary changes
• Developing and implementing policies and procedures for IT governance, risk management, and compliance (GRC)
• Training and educating staff about risk management and compliance requirements
• Conducting regular audits and reviews to ensure compliance and identify areas of improvement
• Creating and presenting reports on IT governance, risk, and compliance to senior management and stakeholders
• Working closely with other departments, such as legal and finance, to ensure organization-wide compliance
• Addressing any data privacy breaches and compliance violations and implementing corrective actions
• Overseeing the Vendor Risk Management Program and facilitating ongoing collaboration with Procurement and Business Stakeholders

Technical Knowledge/Skill/Education/Licenses/Certifications:

Technical Knowledge/Skill:

• Strong working knowledge of information systems security standards and practices
• Must be knowledgeable of NERC-CIP requirements.

Education:

• Bachelor’s degree in Information Systems, related technical field, or equivalent experience

Experience:

• Minimum of three (3) to eight (8) years of related experience with a minimum of 4 - 6 years of experience in the field of information security or third party contract oversight.
• Experience with one or more of the following: security monitoring, database security, policy and procedure, Active Directory, cryptography/PKI, application security assessments, risk assessments, security awareness, or related information security subject area

Licenses & Certifications:

• Security certification preferred

Working Conditions:

• Must be available to work emergency restoration assignment as required.
• Must be available to travel between MA/CT/NH as necessary.
• On-Call and need to work off hours

#LI-KS1

#corpajd

Leadership Behaviors/Competencies

Build Trusting Relationships, Create a Diverse, Equitable and Inclusive Workplace, Focus on the Customer, Foster Teamwork & Cross-Functional Collaboration, Manage and Develop People, Set Direction and Communicate Priorities

Compensation and Benefits:

Eversource offers a competitive total rewards program. Check out our careers site for an overview of our benefits programs. Salary is commensurate with your experience. This position is eligible for a potential incentive. The annual salary range for this position is:

$129,790.00-$144,210.00

Worker Type:

Regular

Number of Openings:

1

Emergency Response:

Responding to emergency situations to meet customers’ needs is part of every employee’s role. If employed, you will be given an Emergency Restoration assignment. This means you may be called to assist during an emergency outside of your normal responsibilities, work hours and location.

EEO Statement:

Eversource Energy is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, sexual orientation, gender identity, national origin, religion, disability status, or protected veteran status.

VEVRRA Federal Contractor