Full-Time

Data Security Manager

Data Security Program

Deadline 6/2/26
Southern Company

Southern Company

10,001+ employees

Regulated utility delivering electricity and gas.

No salary listed

Birmingham, AL, USA + 1 more

More locations: Atlanta, GA, USA

In Person

On-site role; must work 4 days per week in Atlanta or Birmingham.

Category
Engineering Management (1)
Required Skills
Cryptography
Data Governance

Get referred to Southern Company

Find people who can refer or advise you

Requirements
  • Proven experience leading enterprise-scale data security programs across multiple disciplines with measurable risk reduction outcomes.
  • 8+ years of experience in cybersecurity, with 3+ years in a leadership or program management role.
  • Demonstrated experience building or operating data security capabilities including data discovery, classification, labeling, and DLP.
  • Strong understanding of data protection across on-prem, cloud, SaaS, and endpoint environments, including data at rest and data in transit.
  • Experience defining and executing encryption strategies, including databases and key management.
  • Experience leading cross-functional initiatives and influencing without direct authority.
  • Strong communication skills with the ability to translate technical risk into business context.
  • Experience working in regulated or highly controlled environments.
  • Ability to mentor and develop security professionals across multiple functions.
  • Must pass NERC CIP & Insider Threat Protection background checks.
Responsibilities
  • Provide leadership focused on building, mentoring, and developing a high‑performing, multi‑discipline data security team spanning governance, engineering, operations, and consulting functions.
  • Own and execute the enterprise Data Security Program strategy and roadmap, aligning outcomes with business priorities, regulatory requirements, and evolving technologies.
  • Translate strategic objectives into actionable operating models, execution plans, and measurable KPIs across multiple functional domains.
  • Lead enterprise efforts to identify, define, and govern sensitive data, including development and adoption of data classification and labeling standards.
  • Own data labeling policy and governance, including label taxonomy, usage standards, enforcement expectations, and adoption improvement.
  • Oversee deployment and ongoing operations of Data Loss Prevention (DLP) capabilities across email, endpoints, SaaS, cloud services, and data repositories.
  • Define and manage DLP policies, detection rules, and enforcement actions (e.g., block, quarantine, encrypt, alert), balancing risk reduction with business usability and driving continuous tuning and improvement.
  • Mature the evolution and operational use of Data Security Posture Management (DSPM) to maintain visibility into sensitive data locations, access pathways, and exposure risks.
  • Monitor, triage, investigate, and respond to DLP and DSPM alerts and findings in partnership with Security Operations, Incident Response, Insider Threat, Identity, and related teams.
  • Drive remediation of data security risks, including over-permissive access, unprotected or misclassified data, and high-risk data movement.
  • Define and execute an enterprise encryption strategy for sensitive data at rest and in transit, including databases, storage platforms, and key management alignment.
  • Own the enterprise cryptographic transition strategy for post‑quantum readiness, including assessment of cryptographic dependencies, prioritization of critical data and systems, phased adoption planning, and execution of pre‑ and post‑quantum approaches.
  • Establish policy, governance, and guardrails for protecting enterprise data while enabling AI adoption, including secure patterns for agentic AI access to and interaction with sensitive data.
  • Provide operational ownership of data security tooling, including upgrades, tuning, patching, integrations, and change management.
  • Establish program metrics, dashboards, and executive reporting to track data security posture, operational performance, cryptographic readiness, and program maturity.
  • Serve as a trusted advisor and consultant to business and technology teams on data protection strategy, patterns, and execution.
  • Build and maintain strong partnerships with Technology, Legal, Privacy, Compliance, Security Operations, Insider Threat teams, and enterprise governance bodies including Cloud COE, AI COE, and related groups.
  • Foster a culture of accountability, collaboration, innovation, and continuous improvement across the data security program.
Desired Qualifications
  • Experience deploying or operating Data Security Posture Management (DSPM) solutions.
  • Hands-on experience with data security tools such as DLP, data discovery/classification platforms, CASB, or cloud security tools.
  • Familiarity with Zero Trust data security concepts and data-centric risk models.
  • Experience integrating data security signals into SIEM/SOAR platforms.
  • Experience defining data protection policy and guardrails for AI and agentic AI use cases.
  • Exposure to post-quantum cryptography (PQC) readiness, cryptographic agility planning, or long-term encryption strategy.
  • Industry certifications such as CISSP, CISM, CCSP, GIAC, or similar.
  • Experience supporting or securing critical infrastructure environments.

Southern Company provides electricity and natural gas to customers in the southeastern United States. It runs diverse power plants—coal, natural gas, nuclear, and renewable sources like solar and wind—and manages generation, transmission, and distribution to deliver energy. It earns money mainly by selling energy in a regulated market that supports stable returns, and it offers an investor-direct purchase option. The company's goal is to provide reliable energy while expanding cleaner energy and maintaining its infrastructure for the future.

Company Size

10,001+

Company Stage

IPO

Headquarters

Atlanta, Georgia

Founded

1912

Get referred to Southern Company

Find people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • An $81 billion capex plan drives 9% rate base growth through 2030 amid AI-driven demand spikes.
  • Sense's Waveform AI pilot detects vegetation encroachments within 100 meters, cutting outage costs.
  • Skydio X10 and Alta X drone fleets now enable BVLOS operations over remote infrastructure safely.

What critics are saying

  • Plant Vogtle's 7-year delay and $17B overrun erode credibility for future nuclear expansion projects.
  • Tier-1 nuclear component forging bottlenecks lock in schedule risks before construction begins.
  • $81B capex execution faces tight permitting constraints, risking ratebase growth underperformance by 2030.

What makes Southern Company unique

  • Southern Company serves 9 million customers across the Southeast with regulated electric and gas utilities.
  • It secured the DOE's largest historic $26.5 billion loan for grid reliability and nuclear enhancements.
  • The company signs 28 large-load contracts totaling 11 GW, primarily with data center operators.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Dental Insurance

401(k) Retirement Plan

401(k) Company Match

Performance Bonus

Tuition Reimbursement

Hybrid Work Options

Company News

UAV Headquarters
Jun 25th, 2026
BVLOS won't save your utility drone program if the Data Pipeline is broken. Here is what Entergy and Southern just said out loud.

BVLOS won't save your utility drone program if the Data Pipeline is broken. Here is what Entergy and Southern just said out loud. Tactical summary. On June 24, 2026, DRONELIFE reported on a panel at InnovateEnergy Week 2026 in The Woodlands, Texas, where UAS managers from two of the largest electric utilities in the country, Entergy and Southern Company, described where their drone programs actually stand heading into the Part 108 era. The most useful thing they did was puncture a comfortable assumption the rest of the industry keeps repeating: that beyond visual line of sight authority is the unlock for utility inspection at scale. It is not, at least not by itself. Jason Goodick, who runs the UAS program at Entergy with roughly 100 pilots, said extended BVLOS does not help one of his core missions, storm-damage assessment, because the bottleneck is not airspace authority. It is data. A single 20-mile transmission-line flight can yield a terabyte of imagery, and during a storm restoration there is no one available to review a terabyte of imagery and turn it into actionable damage reports fast enough to matter. That is a sentence every utility drone program manager, and every vendor selling them a BVLOS waiver, should read twice. Why "just get BVLOS" Is the wrong North star. The standard industry pitch treats BVLOS as the finish line. Get the waiver, fly farther, cover more assets per sortie, done. The Entergy account exposes why that framing fails in practice for a whole class of utility missions. During storm recovery, the constraint is time-to-decision, not distance flown. Goodick described flying shorter inspection runs of two to three miles during storm applications precisely because that keeps the data volume small enough to process and act on without delaying restoration or sending crews back out twice. A 20-mile BVLOS sortie that generates a terabyte you cannot review for days is not an efficiency gain in that scenario. It is a backlog generator. This is the part of an operational design that gets ignored when programs chase the regulatory headline. The flight is the cheap part. The expensive, rate-limiting part is the pipeline behind the flight: ingest, storage, defect detection, human review, and report generation feeding the people who dispatch repair crews. If that pipeline cannot keep pace with the sensor, more range and more autonomy just move the choke point downstream and make it worse. For program managers building or scaling a utility UAS program, the practical takeaway is to size the data and analysis pipeline first, then scope the flight operations to feed it, not the reverse. Map your true time-to-decision requirement for each mission type. Storm restoration and routine asset-health inspection have completely different latency tolerances, and they justify completely different concepts of operation. Automated defect detection and machine-learning triage are not nice-to-haves here. For storm work they are the difference between BVLOS helping and BVLOS hurting. Where BVLOS genuinely pays off. None of this means BVLOS is irrelevant to utilities. It means the value is mission-specific, and the utilities themselves are clear about where it lands. Southern Company, with roughly 190 pilots serving about nine million electric and gas customers, described holding a broad nationwide BVLOS waiver that lets its Skydio X10 fleet fly over any of its own infrastructure. Tim Hadaway's framing is instructive: in flat South Georgia he can push the aircraft two and a half miles out and hold signal, while in the mountains of North Georgia terrain and tree cover cut that range sharply, but he can still fly beyond line of sight within those limits. That is BVLOS used as an access tool for remote or road-inaccessible assets, where the alternative is a crew driving hours or not reaching the asset at all. The value there is real and obvious. Note also the airspace mechanics that come with post-storm work. After major storms the FAA frequently stands up Temporary Flight Restrictions over the affected area, and Southern files a Certificate of Authorization to operate inside those TFRs. That COA-in-a-TFR workflow is a recurring, plannable compliance task for any utility that flies disaster response, and it is exactly the kind of preparation that should live in a program's standard operating procedures long before the storm. If you are still treating TFR access as an emergency scramble, you are behind. Its BVLOS compliance checklist and the broader Part 108 explainer walk through how to pre-stage that authority work. The post-dji transition is a cost and timeline problem. The second thread from the panel is the move away from DJI hardware, driven by federal pressure on Chinese-made UAVs and the FCC's decision to place DJI on its Covered List for new products. The two utilities are at different stages, and the contrast is the lesson. Southern Company has already transitioned. Its fleet is now Skydio X10 for manual and dock operations, Alta X, and two SwissDrones VTOL platforms for long-range heavy-lift LiDAR work. Entergy is still flying DJI to hold costs down while it searches for a replacement, and Goodick was candid that DJI's ease of use and optics remain hard to match at the price point. His cybersecurity posture is the operationally interesting detail: Entergy air-gaps its DJI systems so the aircraft never touch network infrastructure, and runs all collected imagery through a separate system that scans the media for malware before it enters any workflow. Whatever you think of the DJI debate, the air-gap-and-scan architecture is a genuinely useful pattern for any operator running hardware that sits on a restricted or banned list while a replacement program runs. It treats the data path, not just the airframe, as the security boundary. UAVHQ covered the economics of the DJI restrictions in its piece on Oregon's study of the FCC ban's costs, and the reality has not changed: transitioning a fleet is a multi-year budget line, not a swap. Plan the cutover around training, spares, software integration, and yes, the data pipeline that has to ingest a new sensor's output. In-House pilots over contractors. One more operational signal worth flagging, because it cuts against a common assumption that utilities will outsource UAS work. Both companies favor in-house, full-time pilots over third-party contractors, and for the same two reasons: cost control, since salaried employees do storm-damage assessment without contractor uptick fees, and accountability, since invested employees tend to show more care and diligence than rotating outside crews. For anyone planning a workforce around utility drone demand, that is a meaningful demand-side data point. The growth is in building internal programs, not just selling flight services into them. The UAVHQ read. The headline most outlets will run is "utilities prepare for BVLOS." The operator read is sharper. Two of the most mature utility drone programs in the country are telling you that for a major mission set, BVLOS authority is not the constraint, data throughput is, and that the post-DJI transition is a budget and timeline problem dressed up as a procurement decision. If you run or advise a utility UAS program, build the analysis pipeline to your worst-case time-to-decision before you buy more range. Pre-stage your TFR and COA workflows so storm response is procedure, not improvisation. And scope the DJI cutover as the multi-year program it actually is, with the data path secured as carefully as the airframe. The teams that win the next phase of utility drone operations will be the ones who treat the flight as the easy part. If you are scoping a utility or critical-infrastructure UAS program and need the BVLOS authority path, TFR and COA workflow, and fleet-transition plan mapped before you commit budget, that is exactly the kind of work UAVHQ does. Sources. Entergy Southern Company BVLOS Part 108 Utility Inspection Storm Response Data Pipeline DJI Transition FCC Covered List COA TFR Remote ID Need expert drone consulting? UAVHQ offers professional consulting for BVLOS waivers, Part 107/108 compliance, utility and critical-infrastructure program design, and regulatory strategy. 25+ years of aviation expertise at your service. Stay ahead of the drone industry. New regulatory analysis and BVLOS briefings on the UAVHQ YouTube channel - subscribe so the next big rule change isn't a surprise.

Metropolitan North Georgia Water Planning District
Jun 12th, 2026
Metropolitan North Georgia Water Planning District welcomes new board leadership and honors outgoing Chairman Page.

Metropolitan North Georgia Water Planning District welcomes new board leadership and honors outgoing Chairman Page. (ATLANTA - June 11, 2026) - The Metropolitan North Georgia Water Planning District (District) is pleased to announce a new board leadership team: Gwinnett County Chairwoman Nicole Love Hendrickson as Board Chair, Cherokee County Chairman Harry Johnston as Board Vice Chair, and Dr. Mark Berry of Georgia Power as Secretary/Treasurer. The District would also like to recognize outgoing Chairman Glenn Page, who concludes six years of steadfast leadership. A former water resources utility general manager and current consultant based in Woodstock, Page brought decades of hands-on operational expertise to the role. "We extend our sincerest gratitude to Glenn Page for his visionary leadership and unwavering commitment metro Atlanta's water resources," said Danny Johnson, Director of the Metropolitan North Georgia Water Planning District. "His legacy will continue to guide the District for years to come." Gwinnett County Chairwoman Nicole Love Hendrickson steps into the role of Board Chair, having previously served as Vice Chair. Elected Gwinnett County Board Chair in 2020 and reelected in 2024, she is the first African American to hold that position in Georgia's second-most populous county, overseeing a $2.58 billion budget and services for more than one million residents. Hendrickson has championed regional transit, housing affordability, and economic inclusion throughout her tenure. She holds a bachelor's degree in psychology from the University of Rhode Island and a Master of Social Work from the University of Georgia. Cherokee County Chairman Harry Johnston brings extensive experience in regional governance to his role as Board Vice Chair. Elected Cherokee County Chairman in 2014, he previously served as District 1 Commissioner from 2000 to 2014 and on the county's planning commission from 1996 to 2000, including two years as chairman. Johnston retired after a 42-year career in finance and accounting with Southern Company. Dr. Mark S. Berry, P.E., will continue his role with the Metropolitan North Georgia Water Planning District Board as Secretary/Treasurer. He currently serves as Senior Vice President of Research and Development for Southern Company Services, where he leads the company's R&D organization and guides strategic technology advancement for a net-zero energy future. Prior to Southern Company, Dr. Berry attained the commissioned rank of lieutenant commander in the United States Navy as a surface warfare officer. "We are grateful to Chairman Page for the strong foundation he helped build, and I am thrilled to welcome Chairman Johnston and Dr. Berry to this leadership team," said Hendrickson. "As we celebrate 25 years of the District's work, we do so with renewed energy and a shared commitment to the regional water future metro Atlanta deserves." MEDIA CONTACT: Paul Donsky, ARC Communications Director 470-626-3869 [email protected]

The New Dawn Liberia
Mar 30th, 2026
LEC moves to end power crisis.

LEC moves to end power crisis. -Advances 100MW emergency solution, secures 300MW gas power project. 0 3 minutes read Monrovia, Liberia / Washington, D.C., March 30, 2026 - The Government of Liberia, through the Liberia Electricity Corporation (LEC), has taken a major step toward resolving nationwide power outages with the implementation of a comprehensive, results-driven energy strategy aimed at addressing immediate electricity shortages while ensuring long-term energy stability. The strategy combines an urgent 100-megawatt (MW) thermal power solution with a transformational 300MW combined-cycle gas power project to be constructed in Buchanan. These initiatives are being pursued alongside the continued development of two major hydropower projects: the St. Paul 2 Hydropower Project, estimated at approximately 250MW, and the St. John Hydropower Project, projected to generate about 316MW. Discover more Digital education tools News Website Hosting The St. Paul 2 project is an intergenerational national undertaking being advanced in partnership with leading multilateral institutions, including the World Bank, African Development Bank, and European Investment Bank. The St. John Hydropower Project, meanwhile, is being developed by a private-sector partner in collaboration with the Government of Liberia. In a statement issued on March 30, 2026, LEC said the coordinated approach reflects a strong national commitment aligned with President Joseph Nyuma Boakai's State of the Nation Address, in which he set an ambitious target of achieving 700MW of installed generation capacity by 2030. The goal is to stabilize power supply in the short term and, over the medium to long term, sustainably address Liberia's energy challenges. LEC further disclosed that the 100MW Heavy Fuel Oil (HFO) plant, being developed in partnership with private-sector stakeholders including MNG Mining Company, is expected to be delivered within 12 months to help address electricity shortages during the upcoming dry season. In parallel, the 300MW gas-fired power project, valued at approximately US$500 million, is expected to anchor Liberia's future energy security and significantly reduce reliance on imported electricity. As part of this effort, LEC has signed a term sheet in Washington, D.C. with Tarpeh Global Initiative (TGI), a U.S.-based energy and infrastructure development firm, with Southern Company serving as technical partner. The agreement marks a major milestone in Liberia's transition toward reliable, affordable, and sustainable electricity. Discover more Liberian Cultural Tours Travel guides to Liberia African proverb books The Buchanan project term sheet was signed following a structured and transparent engagement process led by LEC, in close coordination with key government institutions, including the Office of the President, Office of the Vice President, Ministry of Foreign Affairs, Ministry of Finance and Development Planning, and the National Investment Commission. TGI, led by Liberian-born CEO James T. Tarpeh II, brings together a consortium of global partners, including Nebula Energy and Southern Company, ensuring international-standard technical expertise and project execution. Project development has been guided by rigorous technical collaboration. In November 2025, TGI conducted an advance mission to Liberia that included site validation, infrastructure assessments, and engagement with LEC's engineering teams. These efforts confirmed Buchanan as the optimal project location due to its strategic position within the national grid and proximity to key infrastructure. Commercial operations for the gas power plant are targeted for end-2029, positioning the project as a cornerstone of Liberia's medium- to long-term energy transformation agenda. Speaking at the signing ceremony, LEC Managing Director Mohammed M. Sherif described the agreement as a critical step toward restoring confidence and building a future in which electricity is no longer a barrier to national development. Beyond expanding generation capacity, Sherif noted that the project is expected to drive economic growth and job creation, generating hundreds of jobs during construction and long-term employment opportunities in plant operations and support services. "We are taking decisive steps today to ensure that, in the medium to long term, Liberia will have the reliable power it needs to grow its economy, support businesses, and improve the quality of life for all Liberians," Sherif said. For his part, James T. Tarpeh II reaffirmed TGI's commitment to local capacity development through partnerships with Liberian universities, technical institutions, and businesses to promote skills transfer and workforce development. "This project is about more than electricity; it is about unlocking Liberia's economic potential," Tarpeh said. "Together with LEC and the Government of Liberia, we are laying the foundation for a stronger, more resilient future." According to Tarpeh, the signed term sheet provides a clear pathway to the next phase of development, with the parties moving expeditiously to negotiate and execute a long-term Power Purchase Agreement (PPA), while simultaneously advancing detailed technical, financial, and environmental studies to support project bankability and implementation.

Yahoo Finance
Mar 27th, 2026
Southern Company's Alabama ROE cap fears fade as Mizuho expects exclusion from final bill

Southern Company raised $29.6 billion in 2025 revenue, up 10.6% year-over-year, with Alabama Power contributing $1.9 billion in Q4. Mizuho maintains its Outperform rating after discussions suggested Alabama's proposed return on equity cap in bill HB 475 will likely be excluded from final legislation. The primary investor concern centred on competing utility bills SB 360 and HB 475, which threatened regulatory constraints on Alabama Power, a key earnings contributor. Mizuho expects the bills to merge into a watered-down version without the ROE cap provision. Southern Company shares have risen 9.8% year-to-date to around $96, trading at a forward P/E of 20.83 with a 3.1% dividend yield. The company delivered full-year adjusted EPS of $4.30, meeting estimates.

Bitget
Mar 10th, 2026
Southern Company secures $26.5B DOE loan to fund 16GW power infrastructure expansion

Southern Company has secured a $26.54 billion loan from the US Department of Energy, the largest single loan in the agency's history, to develop over 16 gigawatts of power generation and transmission infrastructure across the Southeast. The DOE projects the financing will reduce Southern's annual interest costs by more than $300 million. TD Cowen analyst Shelby Tucker reaffirmed a Buy rating with a $112 price target. The company has secured 10 gigawatts of customer commitments from clients including Google and Meta, supporting its $81 billion five-year investment plan. Southern currently trades at a P/E ratio of 24.9 with a 3.0% dividend yield. Management forecasts 2026 adjusted earnings of $4.50 to $4.60 per share. The consensus rating is Hold with an average price target of $100.64.