Principal IT Governance and Risk Consultant

About PSEG Long Island PSEG Long Island operates the Long Island Power Authority’s transmission and distribution system under a long-term contract. PSEG Long Island is a subsidiary of Public Service Enterprise Group Inc. (PSEG) (NYSE:PEG), a publicly traded diversified energy company.

PSEG Long Island

Energy EfficiencyElectric Utilityand Customer Service

P

psegliny.com

1,001-5,000 employees

Utilities

2014

Nonprofit

13k LinkedIn followers

• This position is a direct report to the Sr IT Manager and has sound knowledge of
• business processes in the specific area of technology enablement. This position
• is responsible for managing Vulnerability Management Remediation, IT Risk
• Improvement, to meet business outcomes, spanning multiple technologies including
• associated impact, cost and complexity. This position is part of IT’s control
• assurance program, and part of IT. In that capacity, this position is
• responsible for the following: Product Consultants are the primary facilitators
• for the product. Product Consultants are responsible for optimizing the value
• proposition. They anticipate issues and/or complications, and respond well to
• time pressures. Leads the effort to work with multiple IT teams to oversee and
• govern Vulnerability Management Remediation, IT Risk Management, Reporting and
• Metrics Management, and Governance & Process Improvement. Serves as a subject
• matter expert for their assigned area. Prioritize actions with IT resources to
• meet changing business needs. Keeps informed of technical and managerial
• advances in IT, including leading the introduction of best practice.
• Primary point of contact for vulnerability management remediation.
• Works with IT teams to govern and enforce IT Vulnerability Management
• process, report SLA adherence status and managing progress throughout the
• lifecycle.
• Collaborate with cyber security team to manage risks related to open
• vulnerabilities.
• Escalates unresolved vulnerabilities in a timely manner and close any
• backlogs.
• Lead the development and maintenance of IT controls aligned with
• frameworks (NIST, NERC, ISO, SOX etc.).
• Map regulatory, audit, and business requirements to control objectives and
• ensure ongoing compliance.
• Prepare management responses, remediation plans, and track closure of
• findings.
• Collaborate with IT Risk Management, Cybersecurity, and Audit teams to
• ensure controls support company objectives.
• Design and build processes for governance of IT vulnerability management,
• risk management, and compliance.
• Identifies process gaps and recommends improvements to enhance efficiency
• and reduce operational risk.
• Define, track, and manage key performance indicators (KPI) for IT business
• areas and capabilities.
• Produce status reports and dashboards for senior leadership team.
• Ensures quality using company-approved methodologies.

• relevant work experience
• Demonstrated leadership capabilities through projects or other work planning
• experiences.
• Must have broad knowledge of the IT business area's functions and
• applications, and of system and technology alternatives.
• Deep familiarity with regulatory and assurance frameworks: NIST CSF, NIST
• 800-53, COBIT, NERC CIP, SOX.
• Strong knowledge of IT general controls, application controls, cybersecurity
• and disaster recovery/business continuity.
• Strong understanding of Vulnerability Management process, Risk assessments
• methodologies, and SLA/KPI management & reporting.
• Demonstrated experience in analytic tools to automate performance reporting,
• and KPI management.
• Prior experience in IT governance, risk and/or compliance field.
• Strong analytical ability to translate insights into actionable
• recommendations.
• Strong verbal and written communication skills.
• Strong facilitation skills.
• Strong judgment and escalation management skills.
• Ability to foster working relationships with the team, IT Management and
• vendor teams.
• Demonstrated ability to measure process performance and identify constraints,
• or any other escalation requirements.
• Department of Energy’s regulation 10 CFR 810 is required.
• Ability to automate repetitive tasks.
• Ability to handle complex challenges under time constraints.
• Project Management Professional Certification (PMP)
• Certified Information Security Manager (CISM), Certified in Risk and
• Information Systems Control (CRISC).
• Some positions at PSEG require access to information covered by the Department
• of Energy’s regulation 10 CFR 810 (Part 810). If applicable, the successful
• applicant must prove they are: (1) a citizen or national of the USA; OR (2) a
• lawful permanent resident of the United States (Non-Conditional Permanent I-551
• / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or
• permanent resident of a “Generally Authorized” destination on the attached list
• 1324b(a)(3)).
• As an employee of PSEG Long Island, you should be aware that during storm/outage
• restoration efforts, you may be required to perform functions different from
• normal operations and work extended hours beyond your regular work schedule. You
• may also be required to work on premise or in an alternate location as directed
• by the company.
• For all roles, PSEGLI’s drug and alcohol testing program includes pre-employment
• testing, testing for cause, and post-incident/accident testing.
• Employees who are hired or transfer into a federally regulated role (including
• positions covered by USDOT, PHMSA, or NRC regulations) are subject to random
• drug and alcohol testing, inclusive of marijuana. Although numerous states
• throughout the country have legalized marijuana/cannabis products recreationally
• and medically, the use of these products are prohibited for employees in
• federally regulated roles. Please note that the use of CBD products may result
• in a positive drug test for THC/Marijuana and such use is not a legitimate
• medical explanation for a positive result.
• If you are a current PSEG employee and offered an opportunity with PSEG Long
• Island, you will be treated as a new hire.  Please note that as a new hire to
• the Long Island subsidiary, your benefits will change and generally will be
• consistent with other similarly situated PSEG Long Island new hires.  Similarly,
• for PSEG Long Island employees who accept job opportunities with PSEG or any of
• its subsidiaries (other than PSEG Long Island), their benefits will change and
• generally be consistent with other similarly situated new hires of that
• company.

• $ 107,600[data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAABlBMVEX///8AAABVwtN+AAAAAXRSTlMAQObYZgAAAAFiS0dEAf8CLd4AAAAEZ0lGZwAAAAp8We1TAAAADGNtUFBKQ21wMDcxMgAAAAdPbbelAAAACklEQVQY02NgAAAAAgABmGNs1wAAAABJRU5ErkJggg==] -
• $ 170,300
• We’re one of the country’s largest energy companies, with a vision of powering a
• future where people use energy more efficiently and it’s safer and delivered
• more reliably than ever. We’re also deeply connected to the communities we
• serve, with more than 13,000 employees working together to support our customers
• and make a difference every day.
• Here, you’ll have the stability and exciting opportunities that come with being
• a Fortune 500 company — along with a supportive, friendly work environment where
• your contributions are valued.
• We offer a flexible work environment designed to balance employee needs with
• collaboration and operational excellence. Roles fall into two categories
• Onsite: Employees work onsite daily.
• Hybrid: A blend of remote and onsite work, with at least three onsite days
• per week required.
• As an employee, if you are regularly scheduled to work 20 or more hours per
• week, you will have access to a wide range of comprehensive benefits designed to
• support your total well-being: medical, dental, vision, paternal leave and
• family leave programs, behavioral health programs, 401(k) with company match,
• life insurance, tuition reimbursement, and generous paid time off.
• More than 13,000 people already call PSEG their work home, taking pride in
• providing safe, reliable service to millions of customers. If you’re looking for
• a place where you can build a meaningful career and help power and support our
• communities, we’d love to welcome you to the team.