Cyber Security Operations Analytics and Reporting

LaBella Associates•Orange, CT

18h•$85,000 - $110,000•Onsite

About The Position

LaBella Associates was established in 1978 and is a certified Great Place to Work. We are headquartered in Rochester, NY with offices across New York, Ohio, Pennsylvania, Connecticut, Maine, Virginia, North and South Carolina, and Madrid, Spain. LaBella is a multi-disciplined architectural and engineering firm dedicated to client satisfaction through teamwork, respect, and trust. We provide services that take a project from start to finish—from an initial study to determine a project’s feasibility to construction administration and start up, and everything in between. We are currently hiring an Analytics and Reporting position in our Program Management Services division at our client’s Rochester, NY OR Orange, CT office (5 days in office). The primary responsibility of the Cyber Analytics and Reporting will be to Support the Senior Manager of Third Party Risk Management in Corporate Security to protect the client’s network and data by ensuring all company purchases complete a third-party risk review. . The Analyst works with Subject Matter Experts and management to provide specialized technical expertise and support for compliance program development and compliance performance tracking and reporting.

Requirements

Master’s degree with 4+ years relevant experience or;
Bachelor’s degree with 6+ years relevant experience or;
Associated degree with 8+ years relevant experience
At least 4 years of experience in compliance management role
Ability to understand and analyze FERC/NERC/NPCC regulatory requirements
Able to work independently and exercise considerable judgment and decision-making
Able to work under tight deadlines with changing priorities
Advanced in Microsoft Office tools, including Outlook, Excel, PowerPoint, and Word
Demonstrated effectiveness in building relationships with diverse groups
Excellent written and verbal communication skills
Exceptional teamwork and interpersonal skills to aid in the resolution of compliance issues
Experience developing and implementing new or significantly revised programs
Good problem-solving and analytical skills
Proficient with PC skills and programs
Superior analytical abilities involving complex problems; exercise sound judgment

Nice To Haves

Ability to effectively prioritize and execute tasks in a high-pressure environment
Excellent interpersonal skills
Excellent written and oral communication skills
Experience with audits and reviewing evidence to ensure compliance
Experience with conducting root cause analyses
Extensive experience working in a team- oriented, collaborative environment
Keen attention to detail
Strong leadership skills
Training experience

Responsibilities

The primary goal of the Cyber Analytics and Reporting is to assist in gathering data, performing administrative functions, and providing reports as they relate to the Avangrid Security Program.
Analyze and revise as needed client compliance program infrastructure including the administration and maintenance of compliance policies, programs, and procedures related to the NERC CIP Standards and the Avangrid Security Program
Maintain applicable NERC-CIP-013 controls and associated actions.
Review business area vendor requests, ensure proper documentation is submitted, work with business areas to correct missing documentation, and recommend risk exceptions where needed.
Develop expertise in OneTrust and Kaseware to fully document TPRM processes and document management.
Work with application subject matter experts to evaluate the TPRM process, discuss AI enhancements, and improve the workflow and system.
Compile data and metrics on a weekly basis to provide reportable information to communicate the status of vendor submissions, team feedback, and documentation.
Continuous process improvement activities as required to align with corporate policies.
Complete additional assigned duties/task as needed. Assist in maintaining and updating operational policy and procedure documentation.
Assist in the review and updates of policies and procedures in conjunction with SME
Conduct annual document management reviewed and updates to demonstrate standards compliance
Help to ensure effective regulatory compliance to the North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards
Monitor regulatory changes and work closely with the SMEs to determine impacts and ensure compliance.
Preparing for, coordinate and support meetings with internal resources, consultants or regulatory organizations
Other duties as assigned