Lead Analyst, Cyber Security Compliance

Vistra • Irving, TX

5d

About The Position

The Lead Analyst, Cyber Security Compliance maintains extensive knowledge of Vistra compliance regulations and develops, implements, and maintains program procedures, processes, and tools. The role leads the development of interpretations of standards and guidance documents, producing clear descriptions of compliance obligations for internal stakeholders and summarizing their impact for company executives. The position administers a proprietary internal control system and ensures documentation used to evidence compliance is accurate and effective.

The Lead Analyst facilitates internal and external audits, investigates variances and escalates issues when needed, performs root cause analysis for instances of non-compliance, and designs and manages corrective action plans. The role also researches and documents processes supporting applicable regulations, helps maintain technology controls and compliance, identifies opportunities for efficiency and automation, and supports projects and metrics related to compliance control performance and effectiveness.

Requirements

• Experience gained through college degree programs and/or certification in a business- or technology-related field, or equivalent experience.
• 7–10 years of experience with an understanding of one or more of the following: NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA, or NRC.
• Ability to be trustworthy and dependable.
• Exceptional reading comprehension and written communication skills.
• Ability to learn quickly, self-motivate to improve knowledge, and tackle new challenges.
• Ability to facilitate agreement across a wide range of disparate stakeholders.
• Working knowledge of application development or a coding language or technology such as VBA, PowerShell, Python, Ruby, or C++.

Nice To Haves

• Experience with ICS devices, generation, or transmission assets.
• Understanding of Human Performance Improvement principles.
• Working knowledge of agile frameworks and methodologies.
• Experience with cloud security and compliance best practices.
• Professional certification, such as CISM, CISA, CISSP, or Digital Design.

Responsibilities

• Perform assigned duties with a high degree of accuracy and consistency.
• Interpret regulations and design processes that promote compliant behavior and generate evidence without creating undue administrative burden for plant staff.
• Maintain positive relationships with plant teams, vendors, and governmental agencies.
• Support technology key controls and compliance with regulatory requirements, including ERCOT and NERC-CIP, as well as corporate technology management and internal audit requirements.
• Identify opportunities for efficiency and automation within compliance controls.
• Support projects to meet performance, cost, and schedule targets without disrupting compliance requirements.
• Support metrics processes that track compliance status and compliance tool effectiveness and health.
• Interpret standards and guidance documents to clarify compliance obligations for internal stakeholders and summarize impacts for company executives.
• Administer the proprietary internal control system and ensure compliance documentation is accurate and effective.
• Facilitate internal and external audit activities.
• Investigate variances and escalate when needed.
• Perform root cause analysis for instances of non-compliance and design and manage corrective action plans.
• Research and document processes that support applicable regulations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed