Associate ET Protection & Control System Field Compliance Analyst

Job Summary

This role is to execute cyber security initiatives in accordance with the Electric Transmission Field Operations (ETFO) Cyber Compliance Monitoring Program. This position will focus on day to day monitoring and surveillance of Electric Transmission’s ICS/OT assets and networks. The primary office is in transition from Grayland Avenue to Innsbrook and will fully transition by the end of March. This role will need to report to the office or field station 5 days a week; Not eligible for hybrid or remote work. This role is eligible to work a weekly schedule of four 10hr days.

• Responsible for developing, supporting, and maintaining awareness of the Industrial Controls System (ICS) and the Operational Technology (OT) systems associated with regulatory requirements, industry trends, and potential impacts to ETFO’s Cyber Compliance Monitoring Program.  
• Support the installation and maintenance of ICS/OT monitoring equipment and protective relay equipment, SCADA, network and security equipment in Power Delivery systems. 
• Utilize cyber security systems deployed in protection of ICS/DCS assets, including asset inventory systems, change management, patch management, file integrity, anti-virus, whitelisting, and firewall rule request applications.  
• Perform compliance and troubleshooting activities (ESNET, Power System Center). 
• Coordinate patch management and cyber asset management activities.  
• Develop and revise baseline configuration documentation as needed per NERC CIP requirements. 
• Analyze potential cyber security incidents, security alerts and perform security assessments under the direction of team leads and management. 
• Participate in annual cyber security incident response exercises.
• Coordinate with IT for firewall rule change requests and network equipment implementation on the ICS/OT network as needed.  
• Coordinate with substation engineering, field personnel, and operation centers to complete scheduled cyber compliance monitoring activities as needed.
• Schedule maintenance activities using the outage application. 
• Develop and track mitigation plans for updates that will not be implemented in accordance with NERC Patch Implementation requirements.
• The company is actively seeking United States military veterans and service members who meet the qualifications outlined below
  Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined (above / below)

Required Knowledge, Skills, Abilities & Experience

• 1-2 years of experience in Information Technology/Operations Technology (IT/OT), cyber security, firewall rule development, and/or management of Windows operating systems security or a combination of this experience and ICS experience. (Note: A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)
• Must have a general ‘hands on’ understanding of cyber security processes and technologies including malware prevention.
• Must be able to perform assignments designed to develop knowledge, skills and abilities requiring application of policies, procedures, techniques and other criteria in executing all aspects of the job.
• Must be able to perform routine work assignments, but over time demonstrate the ability to perform more complex assignments.
• Must be able to work under established policies and procedures to meet set deadlines and program requirements.
• Must be able to develop a good understanding of NERC CIP standards and requirements.
• Must be able to develop a good understanding of ETFO Cyber Security program and its application.
• Must be able to develop an understanding of substation awareness including a working knowledge of substation design, architecture, physical security measures, electronic security measures, and safety best practices.
• Must have the ability to adapt to rapidly changing technology and regulatory requirements to meet business needs.
• Competency in verbal and written communication skills.

Education Requirements

Preferred Associate Degree (or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education)

*This role will accept upcoming graduates no later than May 31st, 2023. 

Disciplines Preferred:

• Cyber Security
• Computer Science
• Electrical Engineering
• Engineering Technology
• Information Technology

Licenses, Certifications, or Quals Description

Working Conditions

Other Working Conditions

Test Description