Cyber Security Manager

Job Posting End Date

08-28-2026

Please note the job posting will close on the day before the posting end date.

Job Summary

Responsible for medium- to long-term assignments of significant complexity and/or budgetary, strategic, or operational impact. Responsibilities include decision making, risk assessment, task prioritization, assignment and tracking of work, project oversight, employee development, performance coaching, team engagement, communication, planning, resource allocation, cost management, issue resolution, conflict management, customer service, and stakeholder relations.

The Security Manager is responsible for directly leading and developing Security team members, building and maintaining collaborative relationships with Operating Company, Business Unit, and Information Technology (IT) leadership, as well as external partners, suppliers, and vendors. The Security Manager is also responsible for managing annual O&M and capital budgets. The Manager is expected to establish credibility and gain acceptance as a trusted partner when working directly with Operating Company, Business Unit, and IT leadership.

The Security Manager will promote and apply Security solutions that align with the strategies and operational needs of Operating Companies and Business Unit customers. He or she will lead the team in delivering projects, initiatives, and daily operational activities through efficient processes, effective resource utilization, and risk reduction practices.

The Security Manager will establish and maintain an open, collaborative environment that promotes safety, accountability, employee engagement, continuous improvement, and operational excellence throughout the Security organization.

The primary differentiators between Security Manager roles are the size and complexity of projects led, the scope of responsibility, the level of risk involved, the breadth of organizational impact, the number of employees supervised, and the grade levels and experience of direct reports.

Job Description

What you’ll do:

Essential Job Functions & Tasks

• Own day-to-day operations, service delivery, and strategic direction for enterprise access management capabilities.

• Lead roadmap development, automation opportunities, and user adoption of modern access management platform.

• Partner with business units to mature Role-Based Access Control across the enterprise, ensuring sustainable governance and operational ownership.

• Support SOX, NERC CIP, and regulatory requirements through effective access governance, reporting, and control execution.

• Establish governance for service accounts, APIs, automation accounts, and emerging AI agents/non-human identities.

• Identify opportunities to reduce manual effort, improve user experience, increase provisioning automation, and reduce security risk.

Additional Preferred Requirements:

• Experience leading enterprise IAM transformations.

• Hands-on experience with Saviynt, SailPoint, or similar IGA platforms.

• Strong understanding of RBAC design and role engineering.

• Experience supporting utility, energy, or highly regulated environments.

• Strong executive communication and stakeholder management skills.

• Proven ability to lead large-scale organizational change initiatives.

• Non-human identity governance

What We're Looking For:

Education requirements are listed below:

• Bachelor's degree or associate degree combined with a minimum of 2 years of applicable business/technical experience in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field OR a HS diploma/GED combined with a minimum of 4 years of applicable business/technical experience preferably in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field.

Work Experience requirement listed below:

• 10 or more years of Security (Physical and/or Cyber), business administration, computer science, or other technical experience, demonstrating steady progression in responsibilities including 4 or more years of direct supervision experience preferred (in addition to any experience identified above).

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation Data

Compensation Grade:

SP20-010

Compensation Range:

$136,539.00 - $177,503.00

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.  

Hear about it first!   Get job alerts by email.  Log in to your Candidate Home Account today!  If you don't have an account, you can create one.

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.