Information Security Analyst ( Cyber Operations

Required Certifications

• CCSP (Certified Cloud Security Professional)
• SSCP (Systems Security Certified Practitioner)
• CISSP (Certified Information Systems Security Professional)

This position is posted until filled.

Preferred Certifications (One Or More)

• Security+
• CySa+
• Pentest+
• CCNA
• C|EH (Certified Ethical Hacker)
• C|CCSE (Cloud Security Engineer)
• CCSP (Certified Cloud Security Professional)
• SSCP (Systems Security Certified Practitioner)
• CISSP (Certified Information Systems Security Professional)

Experience in at least one of the following Cyber Security domains preferred:

• Threat Detection & Response
• Identity & Access Management (IAM)
• Vulnerability & Exposure Management
• Endpoint & Workload Protection
• Cloud Security & Posture Management
• Network Security & Perimeter Controls

Salary Grade: G07

Minimum Midpoint Maximum

$73,060 - $96,804 - $120,548

Personnel in this job title may be covered by NERC CIP cyber security standards. If the position is covered, prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training.

Annual cyber security training is also required.

SUMMARY:

Under general supervision, provisions electronic access to systems and applications. Acts as an IT security subject matter expert for supported systems and applications. Responsible for Identity and Access Management (IAM), access management, provisioning and compliance controls relating to managing access based on business need. Analyzes the security of systems and applications, and develops security baselines to protect information against unauthorized access.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Provisions electronic access for supported systems and applications in accordance with Access Management and Provisioning program
• Ensures all access issues are handled in a timely manner and that supported systems are functioning properly
• Creates, modifies and deletes profiles and other access controls as part of Role Based Access Control (RBAC) program
• Provides routine reaccreditation of existing users and associated entitlements
• Produces evidence in support of Company policies and regulatory requirements, such as Sarbanes-Oxley (SOX) and North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
• Recommends security access requirements for systems and applications; creates ad hoc reports for review
• Participates in major projects, as needed, in support of business initiatives; ensures project work is completed in a timely manner in accordance with Information Security policies, programs and standards; contributes and recommends improvements to the Access Management and Provisioning program
• Performs user access reviews supporting Company investigation needs; assists with data preservation requests for litigation holds; conducts digital forensics in support of the Security program

COMPETENCIES:

• Knowledge of Company business practices and familiarity with Company products and services
• Ability to develop and make recommendations for security processes, procedure improvements and management level security standards
• Ability to identify best practices for security risk assessments, policies, standards and processes
• Policy, process, and standard development experience

MINIMUM EDUCATION AND/OR

EXPERIENCE:

Bachelors degree from a four-year college or university in Information Resource Management, Business Computer Systems, Computer Science or Computer Security with three to five years related experience, or equivalent combination of education and/or experience related to the discipline.

COMMUNICATION

SKILLS:

• Ability to maintain positive and productive working relationships with various individuals and groups
• Ability to recognize and initiate tasks without direction
• Ability to read and interpret technical manuals and reports, instructional documents, and procedure manuals
• Ability to write procedural…