Senior Manager Cybersecurity

Important Application Submission Information

In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Sunday, August 23, 2026

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Job Summary

Leads Duke Energy's Cybersecurity Supply Chain Risk Management (C-SCRM), Third-Party Risk Management (TPRM), and Cybersecurity Culture & Awareness programs. Responsible for establishing strategy, governance, operational processes, and performance metrics that identify, assess, mitigate, monitor, and report cybersecurity risk arising from suppliers, vendors, service providers, software providers, cloud providers, and other external dependencies. Oversees the enterprise cybersecurity culture and awareness program to strengthen employee security behaviors, reduce human risk, and improve organizational cyber resilience.

Leads managers and cybersecurity professionals responsible for supplier and third-party cyber risk assessments, continuous monitoring, contractual cybersecurity requirements, secure software supply chain governance, awareness training, phishing resilience, culture measurement, and executive engagement programs. Ensures alignment with cybersecurity strategy, regulatory obligations, business objectives, and industry frameworks.

Responsibilities
  • Develop and maintain the enterprise Cybersecurity Supply Chain Risk Management (C-SCRM) and TPRM governance framework.

  • Provide clear risk mitigating directives for projects/initiatives/services including the application of controls to protect company assets.

  • Maintain and support a document framework of continuously up-to-date cybersecurity policies, standards and guidelines for the TPRM and Cybersecurity Awareness programs.

  • Help create the necessary internal networks among the cybersecurity team and line-of-business areas to ensure alignment as required.

  • Manage end-to-end third-party cyber risk lifecycle activities including:

    • Intake

    • Risk assessment

    • Remediation tracking

    • Exception management

    • Periodic reassessment

    • Offboarding

  • Oversee cyber assessments utilizing:

    • SIG questionnaires

    • SOC 1/SOC 2 reports

    • ISO certifications

    • Independent assessments

    • Continuous monitoring platforms

  • Provide regular reporting on the status of the Third-Party Risk Management (TPRM) and Cybersecurity Awareness programs as part of a strategic enterprise risk management program, thus supporting business positive outcomes.

  • Support a process for monitoring and periodically re-assessing third parties to ensure compliance with obligations.

  • Work with Legal and Supply Chain to ensure that cybersecurity requirements and the right to assess third parties be included in contracts/agreements.

  • Oversee the cybersecurity awareness and training program for all employees, contractors and approved system users, including formation, evaluation and action plans based on metrics regarding program effectiveness.

Required/Basic Qualifications
  • Bachelors degree in Cybersecurity, Computer Science, Management Information Systems, or Other Related Degree

  • Minimum 10 years related work experience

  • In lieu of Bachelors degree(s) AND 10 year(s) related work experience listed above, High School/GED AND 14 year(s) related work experience

Desired Qualifications
  • Experience designing, implementing, and leading Third Party Risk Management (TPRM) programs at scale.

  • Knowledge of applicable NIST and ISO 27001/27036 Cybersecurity standards along with SOC1/SOC2 Type 1/Type 2 reports.

  • Strong experience addressing senior-level leadership and the ability to collaborate and lead cross-functional teams and initiatives.

  • Experience in inspiring change and leading a large-scale risk management framework in a large company.

  • Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate cybersecurity and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from individual contributors to senior staff.

  • Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.

  • Ability to lead and motivate the cybersecurity team to achieve tactical and strategic goals.

  • Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Cybersecurity Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.

  • Experience with contract and vendor negotiations

  • High degree of initiative, dependability and ability to work with little supervision while being resilient to change

  • Works effectively with a variety of personalities and can adapt his/her approach to effectively reach and develop his/her team. Uses this skill as well as his/her functional knowledge to both earn and maintain a high level of credibility with the team.

Working Conditions
  • Hybrid Mobility Classification - Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable daily commute to a Duke Energy facility.

  • Office Environment

Specific Requirements
  • Bachelor of Science or Bachelor of Arts degree, preferably in Cybersecurity, Information Security, Computer Science, Management Information Systems or other closely related fields

  • 10+ years of experience in Cybersecurity fields, or roles focused on cybersecurity or IT functions, to include at least 1 year of managerial experience in addition to a degree OR 14+ years of Cybersecurity related experience, to include at least 1 year of managerial experience in lieu of a degree

  • Ability to obtain one of the following within three years of hire: Certified Information Systems Security Professional (CISSP), Certified Cybersecurity Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.

Travel Requirements

5-15%

Relocation Assistance Provided (as applicable)No

Represented/Union PositionNo

Visa Sponsored PositionNo. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility

Back to blog

Other Jobs To Apply

Remote Customer Service Rep Up to 19/hour - No Degree Needed - Full-time / Part-time

Remote Amazon Data Entry Jobs - No Experience - Part-Time

Data Entry Clerk Work From Home - Part-Time Focus Group Participants (Up To $750/Week)

Remote Out of Office Position / Data Entry (Hiring Immediately)

Marketing Specialist Flexible Remote Career

Remote Data Entry Clerk - Typing - Part Time Entry Level-United States

Customer Care Specialist - Work From Home

Remote Customer Service Specialist

Heavy Duty Mechanic w/truck (Acheson)

Contract Full Stack Editor

Work From Home

Work From Home Chat Support Agent

Typing Jobs From Home - No Experience (REMOTE JOBS)

Customer Service Representative

Servicing Travel Advisor III - Chase Travel (Remote - Tempe, AZ)

Manager of Enterprise Open Source Sales Team

Amazon Customer Service - Work From Home $16-$24/hr

Entry level Job Delta Data Entry Jobs – Remote High Paying Opportunities Job ID- 680 Job ID- 2883

Account Manager II (Remote)

Freelance English (US) Live Captioner/Live Subtitler

Customer Service Rep (100% Work From Home)

Remote Entry-Level Virtual Data Entry Specialist

`Urgently Hiring| 100% Remote | Entry Level Leadership | Free Full Training | No Experience Needed | Start ASAP

(Part-Time Remote) Amazon Online Chat Jobs - (Work From Home)

Senior Analyst - Digital Compliance (Remote)

Software Engineer, Compute

Administrative Assistant / Data Entry Clerk (Remote Work From Home)

Entry-level Cybersecurity Associate (No Experience Required)

Remote FedEx Jobs: No Experience Needed Join Our Team Today!

Entry-Level Remote Data Entry Specialist for Aetna Careers At Home - Studies, Resolution, and Records Correction

Delta Airlines Remote Customer Support - Work From Your Own Home

Transportation Representative, Transportation Representative

Join Today: Netflix Online Jobs – Part-Time (No Experience/Entry Level)

Remote Typing Jobs No Experience

Data Entry Jobs No Experience (Remote)

Part Time Yelp Spam Comment Remover Live Chat Remote Jobs USA

Call Center Representative Agent Work From Home - Part-Time Focus Group Panelist

**Remote Chat Customer Support Specialist – No Degree Required, Weekly Pay, $25–$35/hr – Join arenaflex**

Online Data Entry & Feedback Panelist - $750/Week - Now Hiring

[Hiring] Health Information Technology Instructor/Program Director @Northwood Technical College

Assembly Packer - 3rd Shift

**Dynamic Part‑Time Data Entry Specialist – Daily Pay, Flexible Hours for College Students – Join arenaflex**

Remote: Entry-Level Career Starter with Flexible Schedule

Radiology Assistant (Night-Shift) - Remote/Part-time, Flex Position

Work from Home - Part Time - Data Entry - $45 per hour

Public Area Attendant - Afternoon/Evening Shift

Children Book Illustrator

Virtual Banker II - Tempe, AZ

Seasoned Overnight Remote Customer Support Specialist – Night Shift Chat Agent, $25–$35 per Hour, No Experience Required

Data Entry/Typing Associate - No Experience (Remote Job)