Cyber Security Associate - Bethpage, NY
About The Position
The Cybersecurity GRC Analyst supports PSEG Long Island’s enterprise cybersecurity governance, risk, and compliance program. The role works with IT, Internal Audit, Compliance, Procurement, and business stakeholders to define, document, assess, and monitor cybersecurity requirements. Responsibilities include maintaining policies and standards, conducting risk assessments, evaluating control effectiveness, coordinating audit and compliance activities, tracking remediation, reviewing third-party risk, and preparing management and leadership reporting. The position is hybrid, with at least three onsite days per week, and is located in Bethpage, New York. It requires a NERC CIP background investigation before the start date. Department of Energy regulation 10 CFR 810 is required; where applicable, the successful applicant must meet the specified citizenship, residency, or protected-individual eligibility criteria. PSEG is not offering visa sponsorship.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cyber Security, Engineering, or a related discipline, with at least 2 years of experience in cybersecurity governance, risk, compliance, IT audit, internal controls, or a related field; candidates without a degree may be considered with 6 years of experience in cybersecurity governance, risk, and compliance.
- Proficiency with cyber GRC technologies such as ServiceNow, Archer, or RSAM.
- Background supporting governance oversight, policy lifecycle management, and standards alignment activities.
- Experience performing risk and control assessments and documenting findings, recommendations, and remediation actions.
- Experience supporting control testing, audit coordination, and compliance validation activities.
- Direct involvement with third-party risk review, vendor assessment support, or related due diligence functions.
- Familiarity with issue remediation tracking, exception management, and reporting processes.
- Advanced analytical, organizational, reporting, and documentation skills.
- Excellent written and verbal communication skills and ability to work effectively with technical and non-technical stakeholders.
- Ability to manage multiple priorities, maintain detailed records, and work independently with limited supervision.
- Department of Energy regulation 10 CFR 810 is required.
- Must complete a NERC CIP background investigation before starting.
- Where applicable, must meet the stated U.S. citizenship, lawful permanent residency, generally authorized destination, or protected-individual eligibility criteria.
Nice To Haves
- Working knowledge of cybersecurity frameworks and control standards such as NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls.
- Cybersecurity certification such as Security+, CISSP, or CISA.
Responsibilities
- Support enterprise cybersecurity program governance oversight.
- Maintain cybersecurity policy lifecycle documentation, including reviewing, updating, and communicating policies, standards, procedures, and related materials.
- Assist with aligning standards to applicable requirements, contractual obligations, and recognized cybersecurity frameworks.
- Perform and document risk and control assessments for systems, applications, vendors, projects, and business processes.
- Identify control gaps, document findings, and support risk treatment planning with business and technical stakeholders.
- Assist with control documentation and testing to evaluate design and operating effectiveness.
- Coordinate internal audits, external audits, and regulatory assessments, including evidence gathering, response tracking, and issue follow-up.
- Support compliance validation to confirm required controls, processes, and documentation are in place and operating as intended.
- Support third-party risk reviews, including security questionnaires, documentation review, assessment follow-up, and findings management.
- Maintain risk registers, issue logs, exception records, remediation plans, and supporting documentation.
- Track remediation and follow up with stakeholders to support timely closure of findings, gaps, and action items.
- Prepare executive reporting and documentation on risk posture, compliance status, audit results, remediation progress, control maturity, and key metrics.
- Support governance committees, risk discussions, and management reporting with accurate, organized documentation.
- Contribute to continuous improvement of GRC processes, templates, reporting, and governance practices.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
