Generation Cyber Security & Compliance Analyst (Sr or Mid level) Hybrid

Job Summary

Works under the direction of Generation Regulatory Compliance management to assist in development of compliance and cyber security solutions which address threats and potential compliance gaps. Develops NERC Cyber Security - Critical Information Protection (CIP) procedures and guidelines. Reviews Generation NERC CIP program evidence for compliance readiness. Responsible for cyber security management solutions and monitoring current processes to determine what is acceptable and not acceptable, not only from a cyber security perspective but also from a compliance perspective. Provides training to Generation employees on cyber security and compliance applications and tools. Works closely with Generation power station personnel and generation support organizations, interfaces with all groups in IT support organizations, contributes to the development of cyber security strategies to implement threat prevention and mitigation capabilities, and to maintain operational situational awareness of the Generation cyber security landscape. Recommends and supports the implementation of cyber security policies, architectures, technical standards, technical controls, security solutions, guidelines, procedures, and other elements necessary to maintain Generation's cyber security and compliance posture. Make recommendations for adopting new technical solutions and procedures. Maintain an awareness of regulatory requirements, industry trends, and the potential impacts to Generation policies, standards, and procedures. Must be able to coordinate multi-project assignments. Must have a detailed understanding of cyber security processes and technologies. Must have a detailed understanding of the following cyber security solutions: 

• Network perimeter controls, including next generation firewalls, routers, and malware prevention 
• Security technologies, including firewalls, logging and monitoring tools, antivirus tools, malware prevention, incident response tools, and security analytics platforms; 
• Security features and system administration of Windows operating systems
• Incident analysis, root cause analysis, forensics analysis, and problem resolution 
• Must have an understanding of process control and SCADA networks and the differences from IT systems when applying cyber security controls 
• Must have an understanding of workstation and server security and protection
• Knowledge in multiple areas of information technology, including security, networks and computing applications 
• Experience in security aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Exercises independent judgment and decision-making in planning, organizing and conducting work assignments.
   

Required Knowledge, Skills, Abilities & Experience

The knowledge, skills, abilities and experience required for entry into this job include the following:

Generation Cyber Security & Compliance Analyst  (Senior):  5+ years in Cyber Security or Operational Technology which is distributed control systems, connectivity and non-PC based systems Strong project management skills

Generation Cyber Security & Compliance Analyst  (Mid): 3+ years in Cyber Security or Operational Technology which is distributed control systems, connectivity and non-PC based systems 

(A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)

• Demonstrated competency in verbal, written, and presentation communications.
• Demonstrated ability to establish and maintain a high level of customer trust and confidence.
• Demonstrated ability to work with all levels of employees and to influence and impact others.
• Demonstrated organization and planning skills that include project coordination and management and the ability to manage multiple deadlines.
• Demonstrated competency in developing effective solutions to business problems.
• Demonstrated ability to analyze problems and to think logically.
• Demonstrate experience as technical expert in field.
• Experience in the adaptation to, and the application of, rapidly changing technology to meet business needs.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education: Bachelor

Preferred Discipline(s):  Engineering, Information Systems, Computer Science

Other disciplines may be substituted for the preferred discipline(s) listed above.

Working Conditions

Other Working Conditions

Regular travel including overnight trips; regular visits to construction sites.