CIP Cyber & Physical Security Analyst

Texas Reliability Entity Inc • Austin, TX

2d • Hybrid

About The Position

CIP Cyber & Physical Security Analyst (Auditor)

Texas Reliability Entity, Inc. (Texas RE) is hiring! We are seeking a CIP Cyber & Physical Security Analyst to join our team to conduct compliance engagements (audits) and internal control assessments based on risk within the Bulk Power System (Energy Sector).

Who We Are

At Texas RE, we affect the lives of millions of people by ensuring effective and efficient reduction of risks to the reliability and security of the Bulk Power System within the ERCOT Interconnection. The ERCOT Interconnection is located within the State of Texas and includes approximately 90% of Texas’s electric load and 75% of its land area. Texas RE’s teams support this this mission while enjoying a flexible work environment, open collaboration, and a culture that values diversity, equity, and inclusion.

Employees work a hybrid work schedule consisting of, at least, two days in the office (Tuesdays and Wednesdays) with the option of working three days remotely. Additionally, employees have the option to take advantage of Flexible Friday, where employees may shift working hours to earlier in the week instead of on Friday afternoon. Considered candidates will be required to reside in the Austin-metro area or be able to reliably commute to the office within a reasonable amount of time.

The Critical Infrastructure Protection (CIP) Cyber and Physical Security Analyst is responsible for performing NERC Reliability Standard compliance engagements and other compliance program activities. The position is expected to develop expertise in the areas of information technology, operational technology, security, electrical power industry, professional auditing, and risk-based compliance processes.

This position prepares and performs engagements to evaluate NERC registered entities for compliance with the NERC Reliability Standards. This position has significant contact with personnel who manage, operate, plan, and oversee generation, transmission, distribution, and cyber/physical security. This position ensures information obtained is consistent and accurate and prepares documentation and reports for the engaged NERC registered entity, NERC, FERC, Texas RE management, and the Texas RE Board.

The CIP Cyber and Physical Security Analyst works independently and in a collaborative team environment while reporting to the Manager, CIP Compliance Monitoring/Director, Compliance Assessments.

The CIP Cyber and Physical Security Analyst is also responsible for assisting with efforts to compose guidance, respond to registered entity questions and provide outreach and training.

Requirements

• Bachelor’s degree in Computer Science or Engineering field of study (or six years applicable experience
• Between 1 to 5 years in excess of degree requirements stated above of progressively responsible experience
• Problem solving skills
• Organizational skills
• Presentation skills
• Interpersonal, verbal, and written communication skills
• Willingness to learn, retain, and share technical knowledge and skills.

Nice To Haves

• One of the following active certifications: Security: A+, Network+, Security+, Systems Security Certified Practitioner (SSCP), GIAC Critical Infrastructure Protection Certification (GCIP) Audit: Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Risk and Information Systems Control (CRISC)
• Knowledge of Industrial Control Systems (SCADA, distributed control systems, relays, etc.) and other utility Operational Technology or Information Technology systems.
• Self-motivated with the ability to manage work objectives efficiently and effectively to meet deadlines.
• Solutions-driven with the ability to make sound and independent judgment(s).
• Ability to adhere to strong professional standards when interacting with others.

Responsibilities

• Ability to travel up to 30%.
• Plans, supports, and conducts:  1. Compliance engagements and internal control assessments of NERC registered entities required for security and reliability issues as a subject matter expert.  2. Data analysis and correlation as necessary through statistical, judgmental, and/or mathematical methods.  3. Internal and external training and outreach.
• Develops, maintains, and delivers: 1. Detailed, accurate, and concise audit workpapers, findings, presentations, and reports. 2. Adherence to departmental procedures and work instructions. 3. Confidentiality and integrity of evidence, findings, reports, and any other records.
• Efficiently and effectively: 1. Communicates strongly within the organization and externally with stakeholders. 2. Collaborates with the ERO Enterprise and industry on compliance, reliability, and security matters. 3. Works independently, proactively, and productively to ensure all work responsibilities (audits, projects, outreach, etc.) are successfully completed.

Benefits

• Texas RE pays 100% of employee-only coverage for medical, dental, vision, life and ADD, short-term and long-term disability, and long-term care insurance, as well as the employee assistance program.
• Additional benefits are offered at a minimal cost to the employee such as dependent medical, dental, voluntary life and ADD for employees, spouses, and children, additional long-term care coverage for family members, legal services and identity protection.
• Texas RE provides a generous 401(k) or Roth 401(k) savings plan for employees, contributing 10% of an employee’s compensation towards the retirement plan with full vesting after three (3) years.
• Additionally, Texas RE will match 75%, up to 6%, of employee contributions, with vesting at 20% per year and full vesting at five (5) years of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 251-500 employees