Analyst, Cybersecurity

TriMet • Portland, OR

2d • Hybrid

About The Position

The Cybersecurity Analyst performs actions in each of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) categories of Identify, Protect, Detect, Respond and Recover that contribute to overall cyber risk reduction for the agency. Example actions include, but are not limited to, enterprise vulnerability management, third party risk management, managing reported and detected phishing emails, and interfacing with TriMet's Managed Detection and Response (MDR) services. A majority of the functions performed include documented security operation aspects of Center for Internet Security (CIS) Controls that are built into the agency's Information Technology (IT) and Operational Technology (OT) implementation and ongoing operations. Activities also include assisting IT and other Divisions in the implementation of the CIS Controls as directed. This role provides Tier 1 support for cybersecurity issues within the agency. This role requires being onsite three (3) days per week. Ensure a commitment to safety and regulatory compliance through effective leadership, training, role modeling and implementing practices that demonstrate safety is a fundamental value and a priority in all aspects of work. Serve as a good steward of TriMet by regularly utilizing our transit system to maintain a strong and current understanding of customers’ experiences and of TriMet’s product and service offerings.

Requirements

• A Bachelor's Degree is required.
• A minimum of two (2) years total credited experience.
• Six (6) months of cybersecurity experience are required.
• Or any equivalent combination of training or experience.
• The amount of credit a candidate receives for prior years of experience is based on the relevancy of that experience to the required or preferred prerequisites of the job description.
• Experience is prorated based on hours worked.
• LRHR assigns and validates the "credited experience".

Nice To Haves

• A Bachelor's Degree in Information Systems, Computer Science, or Information Security is preferred.
• Six (6) months of exposure to National Institute of Standards and Technology (NIST), Cybersecurity Framework (CSF) and/or Center for Internet Security (CIS) Controls are preferred.

Responsibilities

• Perform documented processes leveraging hardware and software tools maintained and operated by the IT Cybersecurity Team in support of Information Technology (IT) and Operational Technology (OT) security functions.
• Responsible for investigating reported security events and escalating when appropriate.
• Perform documented Risk Management functions including on risk assessments of new vendors and ongoing Third Party Risk Management (TPRM).
• Review all incoming service requests for the Cybersecurity Team assign to team member based on assigned responsibilities.
• Assist with multiple cybersecurity related projects and initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level