Duke Energy Corporation

Lead cybersecurity supply chain risk and third-party risk management programs and establish governance and operational processes to mitigate risks. | Bachelor's degree with 10+ years experience or high school diploma with 14+ years, strong leadership and large-scale risk management framework experience required. | Important Application Submission Information In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Sunday, August 23, 2026 More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits. Job Summary Leads Duke Energy’s Cybersecurity Supply Chain Risk Management (C-SCRM), Third-Party Risk Management (TPRM), and Cybersecurity Culture & Awareness programs. Responsible for establishing strategy, governance, operational processes, and performance metrics that identify, assess, mitigate, monitor, and report cybersecurity risk arising from suppliers, vendors, service providers, software providers, cloud providers, and other external dependencies. Oversees the enterprise cybersecurity culture and awareness program to strengthen employee security behaviors, reduce human risk, and improve organizational cyber resilience. Leads managers and cybersecurity professionals responsible for supplier and third-party cyber risk assessments, continuous monitoring, contractual cybersecurity requirements, secure software supply chain governance, awareness training, phishing resilience, culture measurement, and executive engagement programs. Ensures alignment with cybersecurity strategy, regulatory obligations, business objectives, and industry frameworks. Responsibilities Develop and maintain the enterprise Cybersecurity Supply Chain Risk Management (C-SCRM) and TPRM governance framework. Provide clear risk mitigating directives for projects/initiatives/services including the application of controls to protect company assets. Maintain and support a document framework of continuously up-to-date cybersecurity policies, standards and guidelines for the TPRM and Cybersecurity Awareness programs. Help create the necessary internal networks among the cybersecurity team and line-of-business areas to ensure alignment as required. Manage end-to-end third-party cyber risk lifecycle activities including: Intake Risk assessment Remediation tracking Exception management Periodic reassessment Offboarding Oversee cyber assessments utilizing: SIG questionnaires SOC 1/SOC 2 reports ISO certifications Independent assessments Continuous monitoring platforms Provide regular reporting on the status of the Third-Party Risk Management (TPRM) and Cybersecurity Awareness programs as part of a strategic enterprise risk management program, thus supporting business positive outcomes. Support a process for monitoring and periodically re-assessing third parties to ensure compliance with obligations. Work with Legal and Supply Chain to ensure that cybersecurity requirements and the right to assess third parties be included in contracts/agreements. Oversee the cybersecurity awareness and training program for all employees, contractors and approved system users, including formation, evaluation and action plans based on metrics regarding program effectiveness. Required/Basic Qualifications Bachelors degree in Cybersecurity, Computer Science, Management Information Systems, or Other Related Degree Minimum 10 years related work experience In lieu of Bachelors degree(s) AND 10 year(s) related work experience listed above, High School/GED AND 14 year(s) related work experience Desired Qualifications Experience designing, implementing, and leading Third Party Risk Management (TPRM) programs at scale. Knowledge of applicable NIST and ISO 27001/27036 Cybersecurity standards along with SOC1/SOC2 Type 1/Type 2 reports. Strong experience addressing senior-level leadership and the ability to collaborate and lead cross-functional teams and initiatives. Experience in inspiring change and leading a large-scale risk management framework in a large company. Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate cybersecurity and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from individual contributors to senior staff. Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives. Ability to lead and motivate the cybersecurity team to achieve tactical and strategic goals. Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Cybersecurity Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials. Experience with contract and vendor negotiations High degree of initiative, dependability and ability to work with little supervision while being resilient to change Works effectively with a variety of personalities and can adapt his/her approach to effectively reach and develop his/her team. Uses this skill as well as his/her functional knowledge to both earn and maintain a high level of credibility with the team. Working Conditions Hybrid Mobility Classification – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable daily commute to a Duke Energy facility. Office Environment Specific Requirements Bachelor of Science or Bachelor of Arts degree, preferably in Cybersecurity, Information Security, Computer Science, Management Information Systems or other closely related fields 10+ years of experience in Cybersecurity fields, or roles focused on cybersecurity or IT functions, to include at least 1 year of managerial experience in addition to a degree OR 14+ years of Cybersecurity related experience, to include at least 1 year of managerial experience in lieu of a degree Ability to obtain one of the following within three years of hire: Certified Information Systems Security Professional (CISSP), Certified Cybersecurity Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials. Travel Requirements 5-15% Relocation Assistance Provided (as applicable) No Represented/Union Position No Visa Sponsored Position No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future. Please note that in order to be considered for this position, you must possess all of the basic/required qualifications. Privacy Do Not Sell My Personal Information (CA) Terms of Use Accessibility

Monitor transport, data, voice, and wireless systems to react to alarms and resolve network issues, facilitating incident resolution and coordinating support staff and field technicians. | Requires an Associate degree or High School diploma with 2 years related experience and Cisco CCNA certification or willingness to obtain within 6 months. | Important Application Submission Information In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Monday, July 20, 2026 More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits. Job Summary: This role is responsible for monitoring of multiple transport, data, voice, wireless and environmental systems and reacting to alarms and internal and external calls. The associate will work closely with teammates on various activities including facilitation of major incidents, determining resources necessary to perform the work and assigning tasks to appropriate support associates. Responsibilities: Monitors, reports, and resolves data and transport issues for various services. These services include but are not limited to Synchronous Optical Networking (SONET), Dense Wavelength Division Multiplexing (DWDM), Optical Transport Network (OTN), Local Area Networks (LAN), Wide Area Networks (WAN), MPLS, SDWAN, ACI, Voice Over IP (VOIP), Land Mobile Radio, Microwave Packet Radio, and a variety of other hardware and software solutions. Facilitates major incident resolution and coordinates support staff Communicates event status to interested parties. Performs equipment testing and vendor support management activities. Monitors, reports, and resolves problems for data and transport networks. Coordinates field service technicians to respond to and restore services. Monitors and responds to all applicable alarms and acts as a central communications center for all telecom issues. Basic/Required: Associates degree in Information Technology In lieu of Associates degree(s) listed above, High School/GED AND 2 year(s) related work experience Desired Qualifications: Proficient using Microsoft products such as Excel, Word, and Power Point Understanding of a broad variety of telecommunications technologies including fiber optic transport, data network, microwave networks, 800 MHz radio systems, paging systems, PBX's and others. Working Conditions: Hybrid Mobility Classification – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable daily commute to a Duke Energy facility. Office Environment Specific Requirements: Must have successfully passed CISCO Certified - CCNA exam If CISCO Certified - CCNA is currently inactive, must be willing to obtain within 6 months #LN-DNI Travel Requirements Relocation Assistance Provided (as applicable) No Represented/Union Position No Visa Sponsored Position No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future. Please note that in order to be considered for this position, you must possess all of the basic/required qualifications. Privacy Do Not Sell My Personal Information (CA) Terms of Use Accessibility

Provide technical expertise, oversee training and development, and manage strategic work activities. | Requires 8+ years experience with leadership in technical project management and ability to work independently. | Important Application Submission Information In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Saturday, July 25, 2026 More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits. The highest level of the non-Engineer degreed technical support role job classification is the Lead Technologist. This job is not part of a standard progression. The job requires a business case justification substantiating the necessity of a Lead role in conjunction with the enterprise Professional titling guidelines. Lead Engineering Technologists provide technical expertise to solve complex problems and utilize the leadership skills necessary to oversee the training and development of the hierarchy. Incumbents engage in strategic oversight and management of work in a specific area of expertise, with minimal supervision. Incumbents are expected to have advanced skills and have the ability to work independently. Responsibilities Provides subject matter expertise and guidance in the identification, analysis and resolution of problems. Requires full engagement with the industry and other utilities to constantly assess how Duke's program is structured and implementing best practices in area of expertise. Ensures accomplishment of business goals and objectives through effective leadership planning, organizing, estimating, scheduling and monitoring of work activities of self and others. Independently reviews and prepares thorough and accurate technical reports, correspondence, documentation, calculations and sketches as well as craft recommendations for necessary actions. Conducts engineering and related studies. Incumbents are expected to engage in frequent working group phone calls and face-to-face meetings to coordinate and implement changes as a result of fleet and recognize industry best practices. Strives to continually improve job-related, technical and professional knowledge, skills and performance. Assists in developing appropriate curriculum to develop others in given area of subject matter expertise. Develops positive working relationships to effectively coordinate work activities and leverage industry expertise. Demonstrates effective oral and written communication skills. Maintains accurate records and files. Supports the company's goals and represents the company positively and professionally. Coaches and mentors other Engineering Technologists and early career Engineers. Basic/Required Qualifications Associated degree in Engineering Technology and minimum 8 years related work experience In lieu of required degree, High School/GED and minimum 10 years related work experience Additional Preferred Qualifications Good written and oral communication skills. Experience in the utility industry. Demonstrates skills applying leadership in the areas of technical project management, program oversight and/or governance. Working Conditions Some business units may require visits to field sites and/or plants Hybrid – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable commute to the designated Duke Energy facility. Reliable, consistent transportation is required to ensure timely arrival at the applicable facility. Specific Requirements Demonstrated ability to work with a variety of individuals from various socio-economic, cultural and ethnic backgrounds. Good written and oral communication skills. Either 6+ years of relevant industry experience coupled with a Bachelor of Science in Engineering or Engineering Technology, or 8+ years of experience and Associate Degree in Engineering or Engineering Technology, or 10+ years equivalent experience without a degree Travel Requirements 5-15% Relocation Assistance Provided (as applicable) No Represented/Union Position No Visa Sponsored Position No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future. Please note that in order to be considered for this position, you must possess all of the basic/required qualifications. Privacy Do Not Sell My Personal Information (CA) Terms of Use Accessibility Current Duke Energy Employees Current employees should utilize the internal career page to apply for available job postings Job Alerts Learn how to set up job alerts here. Future Interest Stay connected with Duke Energy by joining our Talent Community. Share your information and take the first step towards a brighter future with us! My Applications Check on the status of your application on your Candidate Home page. Need Assistance? View a step-by-step application guide for assistance in completing the process. Contact our team for questions on our hiring process. Diversity & Inclusion Read about our commitment to supporting a diverse and inclusive workforce. About Duke Energy Terms of Use Brighter opportunities. Brighter futures. Duke Energy values ideas that come from a diverse and inclusive workforce, and we’re dedicated to providing a work environment where all people are valued, respected and able to reach their full potential. Duke Energy is an equal opportunity employer and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, childbirth or related medical conditions, including but not limited to lactation, religion, national origin, ancestry, ethnicity, citizenship, sexual orientation, gender identity, gender expression, age, marital status, physical or mental disability, genetic information, medical condition, military status, or protected veteran status. Duke Energy complies with all applicable state, federal and local laws, regulations and ordinances prohibiting discrimination. Privacy California Consumer Privacy Statement Duke Energy Notice to Employees: Government Contractor Whistleblower Protections Do Not Sell or Share My Personal Information (CA) Terms of Use Accessibility