Senior Manager, Global Information Technology

The Technology GRC Senior Manager leads the technology governance, risk and compliance function for regulated IT/OT environments. This role translates compliance obligations into practical technical controls, maintains audit-ready evidence, and serves the designated technical subject-matter expert (SME) for NERC CIP and Global regulatory electricity compliance (Including Europe, Chile, and Australia) within the technology organization including customer, and supply-chain requirements. The role owns governance and control integrity, while operational teams remain accountable for daily infrastructure, cloud, network, tooling, and OT operations., * Act as the IT/OT compliance interface to Legal, Corporate Compliance, Information Security, IT, OT and business teams for technology obligations, audits, reviews, and customer commitments.

• Own and govern technical control design, control documentation, evidence quality, control monitoring, remediation, validation, and audit-readiness routines for regulated environments.
• Partner with compliance and operational control owners to establish clear roles, review cadence, escalation paths and defensible evidence for access, change, configuration, vulnerability, malware, logging, and monitoring controls.
• Support NERC CIP compliance activities including evidence management, self-certification, auditor data requests, mitigation tracking, technical attestations and control demonstrations.
• Maintain policies, standards, procedures, exception processes and governance artifacts across IT, OT, security, compliance, and vendor-risk domains.
• Embed compliance requirements into change management, incident response, recovery, access management, data protection, vendor risk and technology lifecycle processes.
• Assess technology, vendor, customer, cloud, SaaS, MSP, software, hardware and OT changes for compliance impact, risk exposure, evidence needs and operating feasibility.
• Build practical workflows, dashboards and reporting that reduce manual evidence collection, improve leadership visibility and escalate compliance gaps or risk acceptance needs.
• Support third-party and supply-chain risk management for applicable technology products and services, including remote access, vulnerability communication, software integrity and vendor assurance expectations.
• Promote a compliance-minded culture through documentation discipline, awareness support, continuous improvement and clear communication with technical and nontechnical stakeholders.

• Bachelor’s degree in a relevant technical field, or equivalent experience.
• 5+ years in IT/OT governance, risk, compliance, information security, auditor technology risk management, including 3+ years supporting technical controls in regulated environments.
• Direct NERC CIP experience, such as evidence management, audit readiness, self-certification, RFI response, mitigation tracking or compliance program coordination.
• Working knowledge of IT/OT security, including segmentation, access, change/configuration, vulnerability, patch, malware prevention, logging, monitoring and recovery controls.
• Understanding of OT operating constraints, including availability priorities, legacy systems, real-time operations and controlled change windows.
• Strong documentation discipline with the ability to produce operationally usable and audit-defensible materials.
• Strong written and verbal communication skills; able to translate technical implementation and compliance requirements for engineers, legal, compliance and senior leadership.

Preferred Qualifications

• Experience in renewable generation, storage, remote monitoring or industrial control environments.
• Relevant certifications such as GICSP, CISSP, CCNP/CCNA, Security+, CISM or equivalent.
• Experience preparing for or supporting NERC CIP audits, self-certifications or regulatory reviews.
• Familiarity with supply-chain, remote access, internal monitoring and governance/control frameworks such as NIST CSF, NIST 800-53, IEC 62443, ITIL, ISO 31000 or similar.

Pulled from the full job description On-the-job training Pet insurance Health insurance 401(k) matching Paid time off Vision insurance Health savings account, * Competitive Pay + Paid Time Off (PTO).

• Quarterly Bonus Program: Performance-based incentive opportunities.
• Health Coverage: Comprehensive and affordable medical, dental, and vision plans effective on your first day.
• Flexible Spending & Health Savings Accounts (FSA/HSA): Options to help you save on healthcare costs.
• Career Growth: On-the-job training with a clear path for advancement.
• Income Protection: Company-paid short-term and long-term disability insurance.
• Legal Support: Access to legal assistance services.
• Employee Assistance Program (EAP): Confidential counseling and support resources.
• Retirement Savings: 401(k) plan with employer matching contributions.
• Additional Perks: Pet insurance and more employee benefits.

Office Physical Requirements

NovaSource Power Services is the world’s #1-ranked solar operations and maintenance (O&M) provider and insight-driven total asset optimization partner for renewables asset owners ready to fuel smart growth. With over 20 years of operating experience and a presence on 5 continents, NovaSource has the global reach and strategic capabilities to achieve our clients’ renewables goals around the world.

NovaSource’s comprehensive approach to total asset optimization in addition to O&M services includes value engineering, performance analysis, strategic supply chain management, and advanced monitoring systems. The company operates in key global markets managing over 30GW of solar power plants. NovaSource’s expertise extends beyond solar and includes battery energy storage systems (BESS), offering a complete suite of services for the evolving renewable energy landscape.