Assoc/Mid/Sr. Electric Transmission Protection and Control System Field Compliance Analyst

Job Summary

This role works under direct and immediate supervision of management and team leads to assist with routine tasks in to support the Electric Transmission Field Operations (ETFO) Cyber Compliance Program. The incumbent will be required to develop an understanding of North American Electric Reliability Corporation’s (NERC) Critical Infrastructure Protection (CIP) requirements and assignments. Duties will include: 

• Support the team on weekly cyber vulnerability assessments, which includes completing assessment procedures, obtaining substation diagrams, reviewing asset lists and an onsite substation inspection.
• Utilize remote engineering applications to obtain asset information and perform shared account updates.
• Develop and maintain an awareness of ETFO Cyber Compliance Program updates and regulatory requirements.
• Participate in annual cyber security incident response exercise to ensure readiness and preparedness of ETFO’s cyber security and incident response program.
• Coordinate with substation engineering, field personnel, and operation centers to complete scheduled compliance activities as needed.
• Assist the team in scheduling maintenance activities using transmission outage applications. Must have the ability to forecast upcoming deadlines and schedule accordingly.

There are multiple positions available which will be filled at the level commensurate with the successful candidate's knowledge, skills, and abilities. 

Required Knowledge, Skills, Abilities & Experience

Associate Electric Transmission P&C Field Compliance Analyst:

• 0-1 years of experience in Information Technology/Operations Technology (IT/OT), cyber security, firewall rule development, and/or management of Windows operating systems security or a combination of this experience and ICS experience (Note: A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)
• Must be able to perform assignments designed to develop knowledge, skills and abilities requiring application of policies, procedures, techniques, and other criteria in executing all aspects of the job.
• Must be able to perform routine work assignments, but over time demonstrate the ability to perform more complex assignments.
• Must be able to work under established policies and procedures to meet set deadlines and program requirements.
• Must be able to develop a good understanding of NERC CIP standards and requirements. Must be able to develop a good understanding of ETFO Cyber Security program and its application.
• Must be able to develop an understanding of substation awareness including a working knowledge of substation design, architecture, physical security measures, electronic security measures, and safety best practices.
• Must have the ability to adapt to rapidly changing technology and regulatory requirements to meet business needs.

Mid Electric Transmission P&C Field Compliance Analyst:

• At least 4+ years of experience in Information Technology/Operations Technology (IT/OT), cyber security, firewall rule development, and/or management of Windows operating systems security – or – 4 years of a combination of this experience and ICS experience. (Note: A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)
• Must have some experience with security technologies including firewalls, logging and monitoring tools, antivirus tools, malware prevention, incident response and recovery tools, asset inventory systems.
• Must have a good understanding of NERC CIP standards and requirements.
• Must have a good understanding of ETFO Cyber Security program and its application.
• Must have an understanding of ICS networks while applying cyber security controls.
• Must have an understanding of automated and manual patch management systems.
• Experience in security aspects of multiple platforms, operating systems, software, communications, and ICS network architecture.
• Must have an understanding of vulnerability assessment tools (i.e. NMAP, NESSUS, and Wireshark).
• Must have an understanding of multiple Substation Communication architectures and Relay protection platforms.
• Must have an understanding of substation awareness including a working knowledge of substation design, architecture, physical security measures, electronic security measures, and safety best practices.
• Must have the ability to adapt to rapidly changing technology and regulatory requirements to meet business needs.
• Strong level of commitment to meeting compliance deadlines.
• Excellent analytical and problem-solving skills.  Ability to work independently and in a team environment to identify errors and implement solutions with under the direction of senior team members.
• Demonstrated leadership and interpersonal skills.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education:

 Associates or Bachelor

 Disciplines Preferred:

•  Computer Science
•  Electrical Engineering
•  Engineering Technology
•  Information Technology

Licenses, Certifications, or Quals Description

Working Conditions

Other Working Conditions

Test Description