Sr Mgr Security (Technology Automation)

About the role

Consumers Energy is Michigan’s largest energy provider, delivering natural gas and/or electricity to 6.8 million of the state’s 10 million residents across all 68 Lower Peninsula counties. The company is committed to reliable, clean, and affordable energy 24/7.

This position is not eligible for immigration sponsorship (e.g., H-1B, TN, CPT, OPT, STEM OPT). Candidates requiring current or future work visa sponsorship should not apply.

Location: Hybrid (virtual/onsite) with required onsite days Monday, Tuesday, and Thursday at One Energy Plaza, Jackson, MI. Candidates must be within commutable distance or willing to relocate; a relocation package is available for those who qualify.

Responsibilities

• Define and implement the organization’s overall security strategy, ensuring alignment with business objectives, industry standards, and regulatory requirements while fostering continuous improvement across all security functions.
• Serve as the primary escalation point for significant security incidents, ensuring timely and effective response, remediation, and cross-functional coordination during major events or disruptions.
• Oversee the identification, assessment, and mitigation of security risks while ensuring adherence to privacy laws, data protection standards, and regulatory compliance requirements across all security domains.
• Stay informed of emerging security threats, technologies, and industry best practices, incorporating appropriate tools, technologies, and methodologies to continuously strengthen the organization’s security posture.
• Perform other non-essential duties as assigned or as necessary.
• Manage workload demands, resource allocation, budgeting, and capital planning across security functions while monitoring key performance indicators (KPIs) and metrics to measure program effectiveness and operational efficiency.
• Mentor, coach, and develop team members, fostering a culture of continuous learning, professional growth, diversity, equity, and inclusion (DE&I) to support a high-performing and empowered security team.
• Oversee and manage one or more security functions, including: Security Operations and Incident Response (CSIRT, threat detection, monitoring, proactive threat hunting, forensic analysis); Security Engineering and Identity and Access Management (design, implementation, and maintenance of security technologies, automation, identity provisioning, authentication, authorization, and governance); Network and Connectivity (routing, switching, firewalls, data transfer); Risk Management, Privacy, and Compliance (risk assessments, privacy programs, regulatory compliance frameworks such as NIST, NERC CIP, and PCI, and audit adherence).
• Ensure organizational resilience through effective Business Continuity and Disaster Recovery planning and execution.
• Build and maintain strong relationships with internal and external stakeholders, including executive leadership, IT, legal, compliance, vendors, auditors, and regulatory bodies; represent the organization in relevant industry forums and regulatory discussions.
• Lead continuous improvement initiatives using established frameworks such as CMMI and Lean; oversee documentation processes; contribute to long-term security roadmaps, strategic planning, and financial initiatives that support organizational goals and strengthen security posture.
• Define and execute the technology automation and orchestration strategy for Security and IT, establishing reusable platforms, engineering standards, integration patterns, and roadmaps that simplify and standardize technology delivery and operations.
• Lead the delivery of automation and orchestration capabilities, including infrastructure automation, self-service provisioning, workflow orchestration, system integrations, and reusable engineering components that accelerate Security and IT delivery.
• Drive measurable operational improvements through automation by reducing manual effort, operational toil, provisioning friction, and delivery cycle times while improving consistency, reliability, and scalability across Security and IT.

Requirements

Education and experience must meet one of the following tiers:

• Bachelor’s degree in a related field and seven (7) or more years of experience in one or more security or IT disciplines (Asset Management, Automation, Compliance, Identity and Access Management, Network Engineering and Operations, Incident Response, IT Infrastructure and Architecture, Network and Security Operations, Privacy, Risk Management, or Security Engineering).
• Associate’s degree in a related field and nine (9) or more years of experience in one or more of the above disciplines.
• High School Diploma/GED and eleven (11) or more years of experience in one or more of the above disciplines.

Skills

• Exceptional verbal and written communication skills, with the ability to articulate complex security concepts to diverse audiences, including executive leadership, technical teams, and non-technical stakeholders at all levels.
• Strong interpersonal and relationship-building skills, with the ability to lead cross-functional teams, collaborate effectively across departments, and build consensus around security initiatives and priorities.
• High level of emotional intelligence, with the ability to effectively manage team dynamics, foster psychological safety, and create an inclusive environment that encourages diverse perspectives.
• Strong commitment to employee development, with a demonstrated track record of mentoring, coaching, and guiding team members in their career development while supporting professional growth and succession planning.
• Demonstrated ability to collaborate effectively and embody the principles of being humble, hungry, and people smart.
• Proven ability to develop and execute comprehensive security strategies aligned with organizational goals while appropriately balancing risk management, operational requirements, and business objectives.
• Demonstrated ability to make sound, data-driven decisions under pressure, particularly during security incidents or crises, while effectively balancing immediate response needs with long-term strategic considerations.
• Expertise in leading organizational change, particularly within security programs, with the ability to manage resistance, drive adoption of new processes and technologies, and promote a culture of continuous improvement.
• Ability to evaluate and prioritize security risks within the broader context of business operations, ensuring resources are allocated effectively and organizational risk tolerance levels are appropriately maintained.

Benefits

• Competitive compensation packages
• Medical, Dental, and Vision coverage
• 401(k) with company match
• Paid parental leave
• Up to 13 paid holidays