Cyber Security Analyst II
About The Position
Idaho Power is looking for a Cyber Security Analyst II to join their Corporate Security team. This role plays a critical part in providing safe, reliable, and affordable energy to communities in Idaho and Oregon. The position is based in downtown Boise, Idaho, with flexible scheduling and the opportunity to work up to 40% remotely. The Cyber Security Analyst II will perform enterprise-level cyber risk assessments, technology-focused risk assessments (including those required for CIP-013), maintain the cybersecurity risk register, conduct security-focused contract reviews, and perform program evaluations. This lead technologist position provides in-depth analysis, design, development, and ongoing support for implementing short- and long-term security solutions. They will apply technology to solve complex business problems by developing detailed systems analysis and design for in-house development and/or third-party software integrations. The role involves participating in complex incident/problem analysis, solution development, action planning, implementation coordination, and evaluation. The analyst will determine IT requirements and business processes, code, test, and coordinate the implementation of complex software solutions. They will be hands-on with security tools, SIEM, IPS, web content filters, and other enterprise security protection solutions. Idaho Power offers work-life balance, competitive pay and benefits, an employee incentive plan, a 401k employer-match, and a pension plan.
Requirements
- Bachelor's degree in information security or closely related degree OR Equivalent information technology experience
- 5 years of information technology experience
- Minimum of 1 year of experience in a key security functional area
- Knowledge of risk assessment methodologies
- Knowledge of security frameworks
- Skills in independent, complex problem solving
- Valid driver's license with an acceptable driving record based on driving requirements for the position
Nice To Haves
- 1 or more years of risk assessment and/or security contract term negotiation experience
- Security specific certification
- IT certification
- Programming language certification
Responsibilities
- Perform enterprise level cyber risk assessments
- Perform technology focused risk assessments including those required for CIP-013
- Maintain cybersecurity risk register
- Conduct security focused contract reviews
- Perform program evaluations
- Provide in-depth analysis, design, development, and ongoing support for the implementation of short- and long-term security solutions
- Apply technology as necessary in the solution of complex business problems by developing detailed systems analysis and design for in-house development and/or 3rd party software integrations
- Participate in complex incident/problem analysis, solution development, action planning, implementation coordination and evaluation
- Determine I.T. requirements and business processes
- Code, test, and coordinate the implementation of complex software solutions
- Be hands-on in security tools, SIEM, IPS, Web content filters and other security enterprise protection solutions
- Exercise discretion, latitude, and judgment within parameters of designated authority
- Perform regular on-call responsibilities
Benefits
- Flexible schedules
- Work-life balance
- Competitive pay
- Competitive benefits
- Employee incentive plan
- 401k employer-match
- Pension plan
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
