CYBERSECURITY SPECIALIST
About The Position
Under the general direction of the Manager, NERC Compliance, the Cybersecurity Specialist supports the organization’s cybersecurity and compliance needs in accordance with North American Energy Reliability Corporation (NERC) standards. The role leads and assists with developing, implementing, and maintaining policies and procedures, cybersecurity systems, training supplementation, evidence collection, and program requirements to comply with regulatory standards and help ensure the reliability and security of the electric grid. The position provides subject matter expertise on NERC Critical Infrastructure Protection (CIP) standards, especially CIP-005, CIP-007, CIP-012, and CIP-015. It collaborates with Corporate Cyber Security, Operational Technology (OT), and Information Technology (IT) teams and supports audits, compliance planning, exercises, and audit preparation. The position is primarily stationary, with some walking, standing, and driving, and may require irregular hours. Salary is commensurate with experience and qualifications.
Requirements
- Associate degree in information technology or electrical engineering, or educational equivalents such as certifications or experience in information technology, cybersecurity, corporate compliance, operational technology, or another technical position within an electric utility.
- Strong attention to detail, with a focus on thorough inspection practices and comprehensive documentation.
- Understanding of computer networking technologies or Supervisory Control and Data Acquisition systems.
- Ability to collaborate and assume a support or leadership role as needed.
- Ability to communicate professionally and effectively with staff, vendors, law enforcement, emergency services, and the general public.
- For Tier II and Tier III: Meet all Tier I criteria.
- For Tier II: Three or more years of experience in information technology, cybersecurity, corporate compliance, operational technology, or another technical position within an electric utility.
- For Tier II: Experience with network management and advanced network technologies.
- For Tier III: Meet all Tier I and Tier II criteria.
- For Tier III: Five or more years of experience in information technology, cybersecurity, corporate compliance, operational technology, or another technical position within an electric utility.
- For Tier III: Certification in a related subject matter.
- For Tier III: Demonstrated knowledge of industry standards and frameworks such as NERC CIP, ISO/IEC 27001, NIST, or SOC 2 Type 2.
- For Tier III: Project management or project technical lead experience.
Nice To Haves
- For Tier II, certification in a related subject such as CompTIA Security+, CompTIA Network+, Cisco Certified Network Associate, CISSP, CISM, or ITIL; alternatively, ability to acquire certification within six months of hire or promotion.
Responsibilities
- Provide subject matter expertise on NERC CIP standards, particularly CIP-005 Electronic Security Perimeter, CIP-007 System Security Management, CIP-012 Communications Between Control Centers, and CIP-015 Internal Network Security Monitoring.
- Collaborate with Corporate Cyber Security, OT, and IT teams to vet the development, implementation, and monitoring of cybersecurity systems protecting the Bulk Electric System.
- Assist the Cyber Security team in developing cybersecurity policies and procedures as an advocate for NERC Compliance.
- Evaluate technical evidence, its sources, and collection procedures in support of the NERC compliance program.
- Ensure the development and testing of disaster recovery plans for NERC CIP assets.
- Assess project plans for technical components affecting CIP assets or labor performed within CIP areas.
- Analyze network diagrams, port configurations, and service maps for risk and compliance.
- Collaborate with NERC subject matter experts to develop procedures and processes aligned with NERC cybersecurity standards.
- Assist with development of the cybersecurity awareness program.
- Support internal and external audits as they arise.
- Participate in regulatory compliance planning sessions, tabletop exercises, and audit preparation meetings.
- Perform other related duties as assigned, including designated duties associated with Storm Restoration.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
Associate degree
