Cyber Security Analyst II

The employer is seeking a Cyber Security Analyst II to support a cyber security program protecting critical energy infrastructure and corporate cyber assets. The role focuses on NERC CIP compliance, security baselines, incident response, vulnerability management, security awareness, and implementation of cyber security projects.

Responsibilities:

• Maintain and support the Cyber Security Program, protecting all corporate cyber assets
• Infrequent overnight business travel to locations throughout the client's service territory (OH, PA, NJ, MD, WV) will be required of this position
• Travel around Akron area as needed
• Support compliance with NERC CIP, protecting the Bulk Electric System
• In conjunction with the team and other stakeholders, develop and maintain security baselines, procedures, and other strategies that effectively protect cyber assets while ensuring reliable and consistent system operations
• Consult with Business Units and IT on security and protection measures of systems and information during the design and implementation of an on-premise and cloud/SaaS solutions
• Participate in the Cyber Incident Response process
• Aid in the development and maintenance of the Security Awareness Training program
• Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services
• Support the implementation of Corporate Cyber Security capital projects by assisting with the implementation of devices; evaluating vendor solutions; assisting with coordination of vulnerability assessment activities; assisting with review of programs, policies, procedures and standards in relation to cyber security best practices

Requirements:

• 4+ years of professional work experience in cyber or information security, or in another IT discipline where cyber or information security was a significant portion of the position's responsibility
• Effective communication skills which includes creating and delivering presentations, briefs, and training sessions
• Must compose well-written, professional documents and reports with minimal editorial and proofing support
• Translate technical output from systems and assessment tools into understandable reports and action plans
• Work effectively with people at varying levels within an organizational hierarchy to accomplish tasks and goals
• Work independently within a set of objectives, procedures, and parameters to accomplish project tasking
• Able to lead ad-hoc project task teams and other workgroups to accomplish project tasks, resolve issues, and lead/communicate important changes
• Able to participate in an on-call rotation (cycling weekly) responding to out-of-hours calls and alerts in support of security response, including infrequent on-site response out-of-hours
• Bachelor's Degree in Computer Science, Information Security, or similar discipline is preferred
• A bachelor's degree in another field with relevant industry experience in cyber/information security will be considered
• Experience in hands-on operation and administration of one or more standard IT discipline areas (Windows, Linux/Unix, Networking, etc.) in a professional setting is preferred
• Holding a security-related certification such as a CISSP, GIAC GSEC, etc., is preferred
• Bachelor's degree preferred
• Security-related certifications such as CISSP, GIAC GSEC, etc