Cyber Security Analyst II

Idaho Power Company•Boise, ID

1d•$116,334 - $140,109•Hybrid

About The Position

Idaho Power — located in vibrant Boise, Idaho — is looking for a Cyber Security Analyst II to join our Corporate Security team. It’s an exciting time to work for Idaho Power. Our work plays a critical role in communities we serve across Idaho and Oregon, and we’re working hard to provide our customers with the safe, reliable, affordable energy they depend on. While this position is based at Idaho Power’s downtown Boise location, we offer both flexible schedules and the opportunity to work up to 40% remote. The primary focus for this position will be to perform enterprise level cyber risk assessments, technology focused risk assessments including those required for CIP-013, maintenance of cybersecurity risk register, security focused contract reviews, and program evaluations. Under broad direction, is a lead technologist position that provides in-depth analysis, design, development, and ongoing support for the implementation of short- and long-term security solutions. They apply technology as necessary in the solution of complex business problems by developing detailed systems analysis and design for in-house development and/or 3rd party software integrations. This individual participates in complex incident/problem analysis, solution development, action planning, implementation coordination and evaluation. Will determine I.T. requirements and business processes, codes, tests, and coordinates the implementation of complex software solutions. Will be hands-on in security tools, SIEM, IPS, Web content filters and other security enterprise protection solutions.

Requirements

Bachelor's degree in information security or closely related degree OR Equivalent information technology experience
5 years of information technology experience
Minimum of 1 year of experience in a key security functional area
Knowledge of risk assessment methodologies
Knowledge of security frameworks
Skills in independent, complex problem solving
Valid driver's license with an acceptable driving record based on driving requirements for the position

Nice To Haves

1 or more years of risk assessment and/or security contract term negotiation experience
Security specific certification, IT certification, and/or programming language certification

Responsibilities

Perform enterprise level cyber risk assessments.
Perform technology focused risk assessments including those required for CIP-013.
Maintain cybersecurity risk register.
Perform security focused contract reviews.
Perform program evaluations.
Provide in-depth analysis, design, development, and ongoing support for the implementation of short- and long-term security solutions.
Apply technology as necessary in the solution of complex business problems by developing detailed systems analysis and design for in-house development and/or 3rd party software integrations.
Participate in complex incident/problem analysis, solution development, action planning, implementation coordination and evaluation.
Determine I.T. requirements and business processes.
Code, test, and coordinate the implementation of complex software solutions.
Be hands-on in security tools, SIEM, IPS, Web content filters and other security enterprise protection solutions.
Exercise discretion, latitude, and judgment within parameters of designated authority.
Perform regular on-call responsibilities.