Cyber Security Analyst

TPI Global Solutions is seeking a Cyber Security Analyst to support cybersecurity and compliance activities in a critical infrastructure environment. The role focuses on NERC CIP CIP-007 R2 patch management, vulnerability management, security operations, incident response, security documentation, and compliance activities.

Responsibilities:

• Monitor and support CIP-007 R2 security patch management processes and related tools
• Support compliance with NERC CIP requirements and cybersecurity controls protecting critical infrastructure
• Maintain and support the organization's cybersecurity program and protection of corporate cyber assets
• Monitor, track, and coordinate security patches and vulnerability remediation throughout the lifecycle
• Perform or support vulnerability assessments of systems, applications, and services
• Develop and maintain security baselines, procedures, standards, and cybersecurity documentation
• Work with IT and business teams to incorporate appropriate security controls into on-premises, cloud, and SaaS solutions
• Translate technical findings from security and assessment tools into clear reports, remediation plans, and action items
• Participate in the cybersecurity incident response process
• Support cybersecurity awareness and training activities
• Assist with cybersecurity projects, including technology implementation, vendor evaluations, vulnerability assessments, and security reviews
• Collaborate with technical and business stakeholders to identify security risks and implement appropriate controls
• Participate in an on-call rotation to support security alerts and incidents, including occasional after-hours onsite response
• Support other cybersecurity and compliance activities as required

Requirements:

• 4–7 years of professional experience in cybersecurity, information security, IT security, or a related IT discipline for a Level II profile
• Hands-on experience with vulnerability management and/or security patch management
• Understanding of NERC CIP requirements; experience with CIP-007 / CIP-007 R2 is highly preferred
• Experience working with security tools, vulnerability assessment platforms, or patch management solutions
• Experience with one or more IT infrastructure areas such as Windows, Linux/Unix, networking, or systems administration
• Ability to analyze technical security findings and communicate them through clear reports and remediation plans
• Strong written and verbal communication skills
• Ability to work independently while collaborating effectively with technical and business teams
• Ability to participate in an on-call security response rotation
• Willingness to travel occasionally to company locations when required
• Experience in utilities, energy, power, critical infrastructure, OT, ICS, or industrial environments
• Direct experience with NERC CIP compliance and BES Cyber Systems
• Experience specifically supporting CIP-007 R2 patch management
• Experience with security baselines, system hardening, and configuration management
• Experience with cybersecurity incident response
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, IT, or a related discipline
• Security certification such as CISSP, GIAC/GSEC, Security+, or similar