IT Cybersecurity Specialist

Duck River Electric Membership Corporation•Shelbyville, TN

1d•Onsite

About The Position

DREMC is seeking an IT Cybersecurity Specialist to protect, monitor, and continuously improve the Cooperative’s cybersecurity posture. The role is the primary hands-on technical resource for cybersecurity operations, implementing and managing security controls to reduce risk, safeguard critical systems and data, and support regulatory, operational, and business requirements. The specialist collaborates with internal departments and IT staff to integrate cybersecurity controls into business operations, projects, and processes, and serves as a subject matter expert on cybersecurity risks, controls, and best practices. The role also coordinates with external vendors, service providers, auditors, and business partners, providing technical oversight to ensure external solutions and services align with Cooperative standards and requirements. Work is primarily in a professional office environment in Shelbyville, Tennessee. The position involves frequent use of computers and security and network management tools, occasional in-person or virtual meetings, and limited travel for training, vendor meetings, or collaboration with other office locations. Emergency response coverage may be needed. The position is non-supervisory and exempt.

Requirements

Bachelor’s degree from an accredited college or university in computer science, information technology, management information systems, or a related field, and five years of experience as a Cybersecurity Specialist or in a related role; alternatively, thirteen years of experience as a Cybersecurity Specialist or in a related role in lieu of education.
Knowledge of current cybersecurity threats, trends, and defensive techniques.
Strong understanding of network security, endpoint security, identity and access management, and security monitoring concepts.
Experience with cybersecurity documentation, policies, risk assessments, and vulnerability management.
Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework.
Familiarity with LAN, WAN, cloud, and mobile-based systems.
Ability to analyze security data and respond effectively to incidents.
Effective oral and written communication skills.
Ability to prioritize, manage multiple tasks, and meet deadlines.
Must possess or be able to obtain a valid Tennessee Driver’s License and be eligible for and remain insured as a driver under the Cooperative’s group liability policy for its automotive fleet.

Nice To Haves

Industry certifications such as CompTIA Security+, ISC2 CISSP, ISACA CISM, EC-Council CEH, or equivalent are preferred.

Responsibilities

Plan, implement, manage, and continuously improve cybersecurity controls across networks, systems, endpoints, applications, and cloud services.
Monitor security tools and platforms to identify, investigate, and respond to cybersecurity threats and incidents.
Administer and support firewalls, endpoint protection, identity and access management, vulnerability scanning, and logging and monitoring solutions.
Conduct risk assessments, vulnerability assessments, and security reviews, and coordinate remediation with IT staff and vendors.
Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security baselines aligned with industry best practices.
Maintain cybersecurity documentation, including incident reports, risk assessments, and security architecture diagrams.
Support incident response activities, including investigation, containment, recovery, and post-incident analysis.
Apply and promote cybersecurity frameworks and best practices, including the NIST Cybersecurity Framework and CIS Controls.
Support disaster recovery, business continuity, and data protection initiatives from a cybersecurity perspective.
Evaluate and recommend cybersecurity tools, technologies, and process improvements aligned with organizational objectives.
Review proposed technology solutions, projects, and system changes to ensure cybersecurity requirements are considered and implemented.
Communicate cybersecurity risks and recommendations to technical and non-technical stakeholders.
Develop and support cybersecurity awareness and training initiatives.
Complete special projects as assigned.
Provide emergency response coverage as needed.