Asc Cybersecurity Gov&Risk Analyst - Intern/Co-op Conversion 2027 (Souza)

Duke Energy Corporation•Charlotte, NC

1d•Onsite

About The Position

This is the first level of the Cybersecurity Governance & Risk Analyst classification hierarchy. Employees at this level solve or assist in solving problems, in single areas of specialization, with general supervision. Incumbents are expected to develop skills, and the ability to work with greater independence. They have knowledge of fundamental concepts and procedures.

Requirements

0 - 2 years utility, cyber security, auditing, compliance, regulatory or related experience.
Duke Energy Intern/Co-op Experience
Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Nice To Haves

Knowledge of Cybersecurity frameworks such as NIST
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
Able to work effectively with defined direction
Demonstrated ability to work independently with supervisory review and direction
Excellent listening and communication skills; able to present information in an understandable manner both verbal and written
Demonstrated ability to absorb change and continue with positive results
Skill in conducting audits or reviews of technical systems.
Skill in performing impact/risk assessments.
Skill in processing collected data for follow-on analysis.
Skill in creating and utilizing mathematical or statistical models.
Knowledge of information technology (IT) supply chain security and supply chain risk management policies, requirements, and procedures.
Demonstrates good listening skills and puts forth the effort to understand others points of view. Has the ability to manage confidential information with a high degree of integrity. Responds well to supervisors, is easy to challenge and develop, and is easily coachable. Able to work effectively with defined direction

Responsibilities

Knowledge in validating the organization against policies/guidelines/precedures/regulations/laws to ensure compliance
Knowledge in reviewing service performance reports identifying any significant issues and variances, initiating, where necessary, corrective actions and ensuring that all outstanding issues are followed up
Ability to evaluate, analyze, and synthesize large quantities of data (which may be fragmented and contradictory) into high quality, fused targeting/intelligence products.
Recognize a possible security violation and take appropriate action to report the incident as required
Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs)
Provide ongoing optimization and problem-solving support
Perform cyber defense trend analysis and reporting.
Research current technology to understand capabilities of required system or network.