Security Specialist Lead- Staff (Advanced Phishing Program Manager)

Job Posting End Date

05-20-2025

Please note the job posting will close on the day before the posting end date

Job Summary

The Phishing Program Manager will part of a team within Compliance, Privacy & Risk.

We are seeking an experienced and motivated Phishing Program Manager to oversee and manage our organizations phishing awareness and prevention program. This role is critical to enhancing our security posture, fostering organizational awareness and ensure alignment with industry-leading security practices. The ideal candidate will excel in end-to-end program management, possess strong leadership skills, and effectively coordinate resources across a matrixed environment.

Job Description

The power of AEP comes from our valued team of unique employees….the best in the business! We’re proud to be one of the largest electric energy companies in the U.S., powering over 5 million homes and businesses, spanning across 11 states. We’re passionate about making an innovative difference in the communities we serve. We’re powering the future – today!

What You'll Do:

Program Ownership:

• Lead the development, implementation, and continuous improvement of the phishing program.
• Ensure alignment with organizational goals and compliance requirements.
• Develop and implement comprehensive strategies to reduce phishing risks and improve organizational resilience.

Operational Management:

• Oversee all aspects of phishing operations, including detection, reporting, and response activities.
• Establish and monitor metrics and KPIs to measure program effectiveness and inform management decisions, including the delivery of regular updates to stakeholders on program status and performance.
• Continuously assess program effectiveness and make data-driven decision to enhance outcomes.

Resource Direction:

• Manage and direct resources across multiple teams in a matrix organization to ensure successful program execution.
• Collaborate with IT, security, and other departments to allocate necessary resources efficiently.
• Serve as a central point of contact for stakeholders, addressing roadblocks and enabling efficient task execution.

Communication Management:

• Direct communications regarding phishing threats and training initiatives through multiple channels (e.g., email, intranet, workshops).
• Develop and deliver presentations to stakeholders, summarizing program status and outcomes.

Stakeholder Engagement:

• Engage with internal and external stakeholders to promote awareness and understanding of phishing threats.
• Advocate for a security first mindset throughout the organization
• Tailor communication approaches to divers audiences, ensuring clear and impactful messaging

Reporting & Analytics

• Deliver regular updates to stakeholder on program status and metrics.
• Monitor and report on the effectiveness of phishing test and awareness campaigns, identifying areas of improvement

What We’re Looking For:

Security Specialist Lead (SG9):

Education: Bachelor's degree in computer science, information systems, business or related field of study; Or Associate's degree in computer science or related field of study with 2 years of relevant work experience; Or High school diploma/GED with 4 years of relevant work experience.

Experience: In addition to any experience required above, 10 years of relevant work experience is required.

Security Specialist Staff (SG10):

Education: Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).

Experience: 10 or more years of Information Technology related experience OR 8 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

Nice-to-have:

Qualifications:

• Proven experience in program management, preferably in cybersecurity or information security.
• Strong understanding of phishing tactics, techniques, and trends.
• Excellent communication and interpersonal skills.
• Ability to work effectively in a matrix organization and manage cross-functional teams.

Skills:

• Certifications such as CISSP, CISM, PMP or similar are a plus.
• Experience with security awareness training programs.
• Familiarity with security tools and technologies related to phishing detection and prevention.

Location: Prefer candidates to live within 50 miles of Columbus, OH

What You’ll Get:

Security Specialist Lead (SG9): $112,869.00-$146,730.50

Security Specialist Staff (SG10): $132,562.00-$172,331.00

In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.

#AEPCareers

Compensation Data

Compensation Grade:

SP20-009

Compensation Range:

$112,869.00-146,730.50 USD

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.