Manager CS Governance, Risk Management and Compliance

Provides strategic vision and approach in setting, executing and evolving the WEC Energy Group Compliance Program for customer-related information, processes, systems and services; maintains and leads a centralized Compliance team to achieve consistent levels of risk and compliance.

Responsible for day-to-day oversight and monitoring of customer-related controls and ongoing evaluation of controls and program to achieve departmental and Corporate objectives.

Translates state, federal and Corporate privacy laws and policies, and industry best practices (such as FACTA/Red Flag Rules, NACHA, TCPA, PCI, EEI Data Working Group, etc.) into an effective customer data privacy compliance program with an understanding of the business processes in customer service, customer operations, finance, information technology and procurement.

Coordinates the efforts of the Customer Information Security team, including staff, technology, projects, and governance. Provides support across WEC Energy Group including information technology, human resources, privacy, loss prevention, fraud, legal, and other departments and identifies customer-related security initiatives and standards.

• Plans, implements and improves compliance and risk management policies, programs, and tools, including enforcement of the company's Policies and Procedures and ensures the company functions in a legal and compliant manner with respect to customer information-related matters.
• Serves as subject matter expert for compliance questions as it relates to rules and regulations, privacy and security, conflicts of interest, and proposed, new or revised laws or regulations.
• Partners with senior management to prioritize and address compliance concerns and to develop policies, procedures, and training, as necessary, to ensure company operates in accordance with state and federal laws.
• Advises management on the status of company's compliance with laws and regulations and prepares governance reports for senior leaders and Board of Directors, as needed.
• Identifies and defines the customer-related compliance program objectives for Customer Service and Customer Operations and various departments; communicates and socializes those objectives to the business.
• Collaborates with Information Security and Internal Audit to ensure alignment between security and privacy compliance programs including policies, practices, and investigations.
• Coordinates with procurement, business, and legal teams to ensure that commitments to customers regarding Third Party Risk Management program capabilities are appropriate, inventoried, and managed. Establish and manage risk dashboards and other reports for key stakeholders.
• Directs customer information-related security programs to ensure appropriate awareness of security policies, procedures, and standards. Identify protection goals, objectives and metrics consistent with corporate and industry security objectives and standards.
• Demonstrates exceptional judgment and discretion when dealing with highly sensitive risk and issue information, including confidential business partner information.

• Bachelor's degree in business, economics, finance, information technology, or related fields
• Ten (10) years of progressively-responsible experience in utility compliance or a closely related field, at least five (5) of which have been in a leadership role or comparable demonstrated leadership capabilities
• Prior experience overseeing a compliance program
• Advanced knowledge of federal and state laws and regulations governing the organization and ethical business, audit, and financial record keeping practices
• Strong verbal and written communication skills, including the ability to present on behalf of the organization
• Strong analytical skills
• Experience interacting with regulatory authorities, clients and customers with respect to information incidents, audits, or other privacy or information protection related inquiries.
• Demonstrated success in managing risk for a portfolio of third parties, including risk identification, assessment, and issue identification and resolution