You will own end-to-end execution of the Enterprise Vulnerability Management (EVM) and Disaster Recovery (DR) programs for the entire Power segment — while simultaneously driving process simplification, optimization, and automation, including the use of artificial intelligence (AI) agents and workflows.

Reporting directly to the Power DT Governance & Compliance Leader, you will coordinate across application teams and senior Technology and Cyber leaders, translating operational data into clear, actionable insights for leadership. Beyond EVM and DR, you will play a key role in Power DT's Governance Optimization program — a strategic initiative focused on reducing governance burden across the organization so the team can concentrate on what truly moves the needle.

Key Responsibilities

• Lead cyber vulnerability management — Own identification, tracking, and resolution of vulnerabilities across all Power DT applications in line with EVM and NIS2 (Network and Information Security Directive) requirements; maintain the risk register, manage escalations, drive root cause analysis, and report regularly to leadership on status and trends.
• Drive governance and process improvement — Contribute to the Governance Optimization program by identifying inefficiencies, redesigning processes from first principles, and deploying AI-enabled workflows to reduce manual effort and increase program maturity.
• Support risk management and policy — Assist in risk assessments, document findings, and help maintain IT policies and procedures covering security, data management, and access control — keeping compliance repositories current and audit-ready.
• Build reporting and visibility — Develop and maintain dashboards and reports that give senior leadership a clear view of IT risk posture, compliance status, and control effectiveness; validate data integrity and support Key Performance Indicator (KPI) / Key Risk Indicator (KRI) reporting.
• Enable a culture of awareness — Help develop training materials and coordinate sessions that build understanding of compliance obligations and best practices across the organization; track participation and capture feedback.
• Support audit readiness — Organize documentation, respond to evidence requests, and support audit coordination activities to ensure the team is consistently prepared.

Who We're Looking For

You are an analytical, intellectually curious problem-solver who brings both operational discipline and a genuine passion for innovation — especially at the intersection of AI, automation, and cybersecurity governance.

Required

• Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or a related field — or 1–3 years of equivalent practical experience in Cyber, IT Audit, or a related field
• 1–3 years of experience with foundational knowledge of security and application controls
• Hands-on curiosity with AI tools and workflow automation — you build, test, and iterate, and treat automation as core to how you work
• Strong analytical and problem-solving skills, including the ability to support control gap identification and basic root cause analysis
• Clear, confident written and verbal communication skills — equally effective with technical teams and senior leadership
• Demonstrated ability to collaborate across functions in a fast-paced, cross-functional environment
• Proficiency in data analysis, including Microsoft Excel; willingness to develop skills in reporting tools such as Power BI or Tableau

Preferred

• Interest in or progress toward relevant certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control)
• Familiarity with COBIT (Control Objectives for Information and Related Technologies) frameworks or SOX (Sarbanes-Oxley Act) compliance requirements
• Experience with dashboard development and KPI/KRI reporting in a governance or risk context

Education

A formal education and subsequent Bachelor's or Master's degree in Computer Engineering, Computer Science, Information Systems, or a related discipline is nice to have, but we are most interested in your total experience and professional achievements.