Manager, Cyber Security Data Protection

CenterPoint Energy and its predecessor companies have been in business for more than 150 years.

Our Vision: Our vision is to become the most admired utility in the United States through the execution of our long-term growth strategy. We have an unwavering commitment to safely and reliably deliver electricity and natural gas to millions of people.

Our Commitment: CenterPoint Energy is committed to creating an inclusive work environment where business results are achieved through the skills, abilities and talents of our diverse workforce.

At CenterPoint Energy, individuals are respected for their contributions toward our company objectives. We strive for an inclusive work environment across all levels that is reflective of the available workforce in the communities we serve.

Summary: Manages personnel and operation of all aspects of data security for the entire data lifecycle. The manager will be responsible for developing a strategy, building the capability, and executing against that strategy to support an operation that provides data protection that protects structured and unstructured data at rest and in transit. This role will ensure the protection of data assets throughout their lifecycle by developing, implementing, and maintaining robust data security measures aligned with industry standards, regulatory requirements, and company policies. The ideal candidate will have a strong background in data security, risk management, and compliance, with the ability to lead cross-functional teams and foster a culture of security awareness.

Plans, coordinates, and manages activities related to installation, configuration, maintenance, and support of data security technologies and policies. The manager will lead the team that will architect and build the data security capability and have resources to support handling of data security findings. This manager will be working cross-functionally as well to help build out our Insider Threat program and work closely with the Data Privacy team, the HR team, and the other infrastructure teams that help to enabled data security. Directly responsible for strategy and implementation of the strategy for Data Classification, Digital Rights Management, Data Loss Prevention, Data backup and recovery and the technologies that will help to drive support of our data asset inventory, data observability, and data protections for CenterPoint sensitive data around the enterprise.

Essential Duties/Responsibilities:

• Develop and implement a comprehensive data security program to safeguard data assets throughout their lifecycle.
• Establish and enforce policies, standards, and procedures for data classification, access control, encryption, and data retention.
• Evaluate emerging technologies and solutions to enhance data protection strategies.
• Conduct data security risk assessments to identify vulnerabilities and recommend appropriate controls.
• Oversee data loss prevention (DLP) measures to mitigate risks related to unauthorized access, sharing, or loss of sensitive data.
• Collaborate with IT, compliance, and business teams to ensure data security requirements are integrated into processes and systems.
• Ensure compliance with data protection laws and regulations (e.g., GDPR, CCPA, HIPAA, and NERC-CIP).
• Manage assessments related to data security and respond to regulatory inquiries as needed.
• Provide input on legal and contractual requirements involving data protection and security.
• Lead training and awareness programs to promote data security best practices across the organization.
• Act as a subject matter expert (SME) on data security and provide guidance to stakeholders.
• Investigate and manage data security finding to ensure timely remediation and reporting.
• Maintain, update, and automate policies and standards related to data protection.
• Provide regular reporting to senior management on the status of the data security program, risks, and metrics.

Education:

Bachelor's degree in computer science, Information Security or related field

Experience:

• 5+ years of experience in data security, information security, or related roles, with at least 2 years in a management or leadership position.
• Strong knowledge of data security frameworks, standards, and practices (e.g., ISO 27001, NIST Cybersecurity Framework).
• Familiarity with database security, encryption technologies, and data privacy regulations.
• Professional certifications such as CISSP, CISM, CISA, or equivalent preferred.
• Strong analytical, communication, and project management skills.

Preferred Attributes:

* Experience in the utilities, industrial manufacturing or critical infrastructure sector.

* Familiarity with on-prem and cloud-based data security practices and tools.

* Strong interpersonal skills with the ability to work collaboratively across departments.

We want you to know

Being a part of the CenterPoint Energy team is more than a career alone. It's an opportunity to make a positive impact. You will be an integral part of enabling everyday life and the pursuit of possibilities for the customers we serve and the communities we share. The vital services we provide are at the core of making our world work, and by sharing your energy with us, we'll create a better tomorrow together.

What we bring to you

• Competitive pay
• Paid training
• Benefits eligibility begins on your first day
• Transit subsidies
• Flexible work schedule, paid holidays and paid time off
• Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution

Job Type:Full Time

Posting Start Date: 03/13/2025

Posting End Date: 03/28/2025

This contractor and subcontractor shall abide by the requirements of 41 CFR * 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability.

#LI-CNP