Cyber Security Operations Analytics and Reporting

LaBella Associates•Rochester, NY

1d•$85,000 - $110,000•Onsite

About The Position

LaBella Associates is seeking an Analytics and Reporting professional to join their Program Management Services division. This role will support the Senior Manager of Third Party Risk Management in Corporate Security, focusing on protecting the client's network and data by ensuring all company purchases undergo a third-party risk review. The Analyst will provide specialized technical expertise and support for compliance program development, performance tracking, and reporting, working closely with Subject Matter Experts and management. The position is based in Rochester, NY, with a requirement of 5 days in the office.

Requirements

Master’s degree with 4+ years relevant experience or; Bachelor’s degree with 6+ years relevant experience or; Associated degree with 8+ years relevant experience
At least 4 years of experience in compliance management role
Ability to understand and analyze FERC/NERC/NPCC regulatory requirements
Able to work independently and exercise considerable judgment and decision-making
Able to work under tight deadlines with changing priorities
Advanced in Microsoft Office tools, including Outlook, Excel, PowerPoint, and Word
Demonstrated effectiveness in building relationships with diverse groups
Excellent written and verbal communication skills
Exceptional teamwork and interpersonal skills to aid in the resolution of compliance issues
Experience developing and implementing new or significantly revised programs
Good problem-solving and analytical skills
Proficient with PC skills and programs
Superior analytical abilities involving complex problems; exercise sound judgment

Nice To Haves

Ability to effectively prioritize and execute tasks in a high-pressure environment
Excellent interpersonal skills
Excellent written and oral communication skills
Experience with audits and reviewing evidence to ensure compliance
Experience with conducting root cause analyses
Extensive experience working in a team-oriented, collaborative environment
Keen attention to detail
Strong leadership skills
Training experience

Responsibilities

Analyze and revise client compliance program infrastructure, including the administration and maintenance of compliance policies, programs, and procedures related to NERC CIP Standards and the Avangrid Security Program.
Maintain applicable NERC-CIP-013 controls and associated actions.
Review business area vendor requests, ensure proper documentation is submitted, work with business areas to correct missing documentation, and recommend risk exceptions where needed.
Develop expertise in OneTrust and Kaseware to fully document TPRM processes and document management.
Work with application subject matter experts to evaluate the TPRM process, discuss AI enhancements, and improve the workflow and system.
Compile data and metrics on a weekly basis to provide reportable information on the status of vendor submissions, team feedback, and documentation.
Engage in continuous process improvement activities as required to align with corporate policies.
Complete additional assigned duties/tasks as needed.
Assist in maintaining and updating operational policy and procedure documentation.
Assist in the review and updates of policies and procedures in conjunction with SMEs.
Conduct annual document management reviews and updates to demonstrate standards compliance.
Help ensure effective regulatory compliance to the North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards.
Monitor regulatory changes and work closely with SMEs to determine impacts and ensure compliance.
Prepare for, coordinate, and support meetings with internal resources, consultants, or regulatory organizations.
Perform other duties as assigned.