Security Risk Coordinator, Sr.

Job Title: Security Risk Coordinator, Sr. Work Place Flexibility: Hybrid Legal Entity: Entergy Services, LLC Primary Locations: Texas (The Woodlands) Arkansas (Little Rock) Louisiana (Baton Rouge) Louisiana (New Orleans) Mississippi (Jackson) Job Summary: The Risk Coordinator Senior serves as a security and risk subject matter expert to help manage security risk and enable alignment to the Enterprise Security Program’s security risk agenda via coordinating and facilitating cyber and physical risk management processes and data to be presented to executive management. The Risk Coordinator Sr. assesses the appropriateness of security, reliability, privacy, and data protection exceptions for business units from inputs provided and recommends where business units can enhance security protocol or execution to meet risk appetite. Responsibilities Risk Identification and Assessment Lead and enhance programs for risk assessment/advisement on new technologies, critical infrastructure protection, logical cyber and physical security controls, and data protection measures. Identify, evaluate, and prioritize risk treatment. Conduct security reviews of corporate and operational technology infrastructure. Risk Management Program Develop and acquire expertise in technology and regulations to ensure Entergy’s security posture and reliability standards align to target risk thresholds. Provide security risk expertise and guidance to diverse enterprise and operational technology stakeholders. Execute and create security risk management program practices and implementation of security policies and requirements. Lead and drive the creation, maintenance and implementation of enterprise, operational, and critical infrastructure protection risk activities. Apply cybersecurity & risk management framework knowledge to drive risk identification across the enterprise. Compliance, Reporting, and Risk Metrics Design and communicate risk details during risk ranking sessions; ensure risk trends are identified. Track and manage risks identified through the security exception process or the cyber/physical risk review process. Develop key risk indicator metrics and reporting processes for executive reporting and dashboards, utilizing technology such as GRC platforms and AI risk methods. Coordination Coordinate with peer CSO functions to address security gaps within the three lines of defense as they arise through the risk exception process, identifying root causes and trends. Liaise with Lines of Business on security and reliability risks identified through the exception process or as new technologies and projects are initiated. Guide business unit stakeholders on mitigation strategies for requested exceptions. Facilitate line of business understanding of the impact of all mission critical business processes. Apply cybersecurity & risk management framework knowledge to drive risk identification across the enterprise. Procedure Development Develop and assist in data and risk management process and procedure development. Data Protection & Privacy Assist in data protection and privacy program governance and oversight activities. Qualifications Education: Bachelor’s Degree in Information Systems, Information Assurance, Risk Management or related field. Experience: 5+ years of information security, critical information protection, information technology, risk management, data analysis, or project management experience. Knowledge, Skills & Abilities: Planning, organizational and project management skills; detail and process-oriented; able to juggle multiple priorities in a fast-paced environment. Problem-solving/decision-making ability. Written and verbal communication; able to explain complex issues clearly and concisely. Interpersonal skills, including teamwork, facilitation and negotiation. Highly collaborative, able to work cross-functionally; forging relationships and partnering effectively. Desired Knowledge, Skills & Abilities (Not required): Understanding of risk management frameworks (NIST 800-39, NISTIR 8286, The Open FAIR, COSO ERM, etc.). Understanding of logical and physical security technologies and controls (NIST CSF, NIST 800-53, etc.). Understanding of privacy protection best practices and technical requirements. Familiarity with technology such as Archer GRC/ServiceNow GRC, Microsoft Power BI, quantitative risk tools, and other risk management platforms. Certifications Desired (Not required): Certified Information Systems Manager (CISM) Certified Information Systems Security Professional (CISSP) Certified in Risk and Information Systems Control (CRISC) Certified in the Governance of Enterprise IT (CGEIT) Certified Information Systems Auditor (CISA) Certified Protection Profession (CPP) EEO Statement The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated. #J-18808-Ljbffr