[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Consolidated Edison jobs](https://jobs.opennash.com/companies/consolidated-edison/) · [Search jobs](/search/)

Consolidated Edison · New York, NY

# Systems Manager-Governance, Risk, & Compliance (GRC)

New York, NY, United States Manager or lead Legal & Compliance 

Listed on Consolidated Edison’s official careers site. Posted October 1, 2026. Check that it is still open and apply there.
[Apply on Consolidated Edison’s careers site →](https://ejcu.fa.us6.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1035/job/1000129)

[OpenNash Jobs](https://jobs.opennash.com/) / [Consolidated Edison](https://jobs.opennash.com/companies/consolidated-edison/) / Systems Manager-Governance, Risk, & Compliance (GRC)

## Job description

The System Manager, Information Security (InfoSec) Governance, Risk & Compliance (GRC), is a leadership role responsible for overseeing information security governance, risk management, compliance, and related strategic programs across the enterprise. Responsibilities include establishing and maintaining frameworks, processes, and capabilities used to identify, assess, manage, communicate, and monitor cybersecurity risk while ensuring alignment with regulatory requirements, industry standards, and business objectives.

The successful candidate must be self-motivated, able to work with minimal guidance, possess extensive organizational skills and attention to detail, and drive results.

## Responsibilities

### Core Responsibilities

Oversee the development and maintenance of information security policies and governance frameworks aligned with national energy security priorities in compliance with regulatory requirements and industry standards. Oversee enterprise information security risk management programs and related governance processes to support informed risk-based decision making. Lead and oversee information security programs focused on internal stakeholder engagement, awareness, and external third-party risk considerations.

Manage team of GRC professionals to achieve business objectives. Be accountable for building team capabilities and operational excellence through workforce planning, training, performance management, and enforcing standards to ensure readiness during incidents. Collaborate with internal stakeholders (IT, OT, Legal, Risk, Operations) and external partners (regulators, government agencies, industry groups). Facilitate incident response planning, exercises, and post-incident reviews to strengthen organizational readiness.

Provide executive-level reporting, supports incident response planning, and champions a culture of cyber accountability and resilience across the organization. Maintain the Companys information security policies, standards, and control frameworks, supporting internal and external audits, and driving continuous improvement of governance and risk management maturity. Provide executive-level reporting on cybersecurity posture, compliance status, and resilience metrics.

Serve as a key liaison between InfoSec, IT, Audit, Legal, peers in InfoSec Compliance, and business stakeholders to ensure security risks are clearly communicated and appropriately governed. Aid internal and regulatory compliance efforts, including NERC CIP, TSA, Coast Guard, and other applicable federal and state mandates. Facilitate and maintain cyber resilience strategies to ensure continuity of operations during and after cyber incidents.

Follow change management and production acceptance controls and guidelines, maintain diagrams and documentation as appropriate and support reviews, auditing and maintenance activities Promote a customer service-oriented team by emphasizing professionalism, honesty, concern, courtesy, excellence and teamwork in a group. Ensure that communications between staff members and business organizations are handed in a professional, efficient manner Support operating organizations during corporate emergencies.

Participate in the Company's emergency management processes for cybersecurity.

## Qualifications

Required Education/Experience Master's Degree and 6 years of work experience in IT or Utility environments with at least four (4) years in GRC or similar or Bachelor's Degree and 8 years of work experience in IT or Utility environments with at least four (4) years in GRC or similar. Preferred Education/Experience Master's Degree preferably in Information Technology, Computer Science, Information Security, Math, Engineering or business-related discipline preferred.

Bachelor's Degree preferably in Information Technology, Computer Science, Information Security, Math, Engineering or business-related discipline preferred. Relevant Work Experience Must demonstrate knowledge of project management concepts and ability to support project monitoring, tracking, and facilitation to ensure project deliverance/completion, required. Proven experience of process and policy creation and documentation, required.

Must demonstrate strong analytical skills, required. Must have managerial/supervisory experience, required. Must demonstrate strong oral and written communication, presentation and interpersonal skills, required. Must have used, and have working knowledge of MS Excel, Word and PowerPoint, required. Experience and working knowledge of information security governance, risk management, compliance, and related cybersecurity program functions, required.

Experience developing and delivering well organized analytical presentations, preferred. Experience with contract administration a plus, preferred. Experience with developing training and awareness programs, preferred. Experience working as a project or program manager role a plus, preferred. Experience in Information Technology/Cybersecurity a plus, preferred.

### Skills and Abilities

Effectively coaches and delivers constructive feedback
- Demonstrates a high commitment to quality Assumes personal responsibility for actions
- Strong verbal communication and listening skills
- Ability to lead/manage others Possesses flexibility to work in a fast paced, dynamic environment Effective interpersonal skills
- Demonstrated analytical skills
- Ability to simultaneously handle multiple priorities Effective interpersonal skills Licenses and Certifications Driver's License Required Physical Demands
- Ability to push, pull, and lift up to 25 pounds Sit or stand to use a keyboard, mouse, and computer for the duration of the workday Additional Physical Demands The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.

## At a glance
- Posted by the employer: Oct 1, 2026
- First seen by OpenNash: Oct 11, 2026
- Last checked: Oct 18, 2026
- Listed for: 17 days
- Location: New York, NY, United States[Apply on Consolidated Edison’s careers site →](https://ejcu.fa.us6.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1035/job/1000129)

## More jobs at Consolidated Edison

### [Associate Counsel - Law, Labor and Employment](https://jobs.opennash.com/companies/consolidated-edison/jobs/fd7ba82f72a1e80a3184/)

New York, NY, United States

### [Clean Energy Manager (Compliance and Risk Manager)](https://jobs.opennash.com/companies/consolidated-edison/jobs/7bcacc60579096660b80/)

New York, NY, United States

### [Senior Product Analyst, Privacy Operations - Customer Operations Regulatory & Compliance](https://jobs.opennash.com/companies/consolidated-edison/jobs/dbbd472a9841151060e0/)

New York, NY, United States

### [Analyst Aide Temp Coops - College Students (Business Majors)](https://jobs.opennash.com/companies/consolidated-edison/jobs/a958c71a015adf963069/)

New York, NY, United States

### [Associate Construction Specialist - Construction Management Gas](https://jobs.opennash.com/companies/consolidated-edison/jobs/2dde18bcfdc5c9b27422/)

New York, NY, United States

## Similar jobs at other companies

### [HR/EX CDAO Data Risk & Governance Associate](https://jobs.opennash.com/companies/jpmorganchase/jobs/c6668c72764e86353852/)

JPMorganChase · New York, NY, United States

### [Advisor, Info Security, Governance, Risk and Compliance](https://jobs.opennash.com/companies/cargill/jobs/42e88611fd05de5348b4/)

Cargill · Atlanta, Georgia

### [Sr. Consultant, Info Security, Governance, Risk and Compliance](https://jobs.opennash.com/companies/cargill/jobs/1f867b4ce6a7027d4eb6/)

Cargill · Atlanta, Georgia

### [AI Risk and AI Risk Governance Manager-1](https://jobs.opennash.com/companies/huntington-bank/jobs/128158491c8925438d0b/)

Huntington Bank · Charlotte, NC

### [Director, IT Governance, Risk, Compliance & AI | General Dynamics](https://jobs.opennash.com/companies/general-dynamics/jobs/616c40681d57a7ec49bc/)

General Dynamics · Scottsdale, AZ, US

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)
