Lead Cybersecurity Analyst

Alliant Energy•Madison, WI

About The Position

Lead at the intersection of strategy and execution—guiding enterprise security decisions, influencing architecture, and reducing real-world risk. The Lead Cybersecurity Analyst provides technical leadership for cybersecurity and risk management programs, including the design, implementation, and continuous improvement of security capabilities. This role partners with IT and business stakeholders to guide secure-by-design solutions, translates strategy into technical direction for initiatives, and leads complex cross-functional work. The position identifies emerging threats and technologies, contributes to strategic planning, shapes security architecture, and mentors cybersecurity professionals.

Requirements

Bachelor’s Degree Information Technology.
8 years of experience in information technology or technology risk management related work experience.
Experience leading security‑related initiatives involving multiple teams and stakeholders.
Demonstrated experience applying security development lifecycle (SDL) practices to internally developed and internet‑facing applications.
Advanced knowledge of cybersecurity principles, secure by design practices, and security development lifecycle (SDL) methodologies.
Ability to lead and influence technical and cross functional teams through complex cybersecurity initiatives.
Strong expertise in information security risk management, including identifying, assessing, and prioritizing cyber risks.
Solid understanding of IT security concepts related to operating systems, networks, identity and access management, and application security.
Ability to design and evaluate security architectures and recommend solutions aligned with enterprise standards.
Demonstrated experience mentoring and developing cybersecurity professionals.
Strong collaboration, communication, and stakeholder engagement skills, with the ability to translate technical risk into business relevant terms.
Knowledge of cybersecurity trends, emerging threats, and regulatory considerations relevant to highly regulated industries.
Access Control Management
Cybersecurity Risk Management
DevSecOps
Incident Response
Information Security Management
Intrusion Detection
Security Governance
Threat Modeling
Vulnerability Management

Nice To Haves

Experience working in a regulated industry and applying information security requirements tied to applicable regulatory frameworks.

Responsibilities

Leads the design, implementation, and continuous improvement of cybersecurity capabilities that support the organization’s secure by design principles.
Acts as the primary cybersecurity resource for complex, strategic initiatives by providing security architecture guidance, conducting security reviews, and recommending risk mitigation strategies.
Sets and maintains cybersecurity technical standards and contributes to the long term security architecture and technology roadmap.
Leads cross functional initiatives and provides technical leadership and mentoring to cybersecurity team members on risk identification, mitigation strategies, and emerging threats.
Identifies gaps in current security controls and advocates for solutions that materially reduce enterprise cyber risk.
Partners with IT, business, risk, and compliance stakeholders to ensure solutions align with regulatory requirements and internal security standards.
Leads initiatives within cybersecurity programs, such as security awareness, third party/vendor risk management, and penetration testing initiatives.
Engages in other duties as needed that support Alliant Energy’s Values and helps deliver on our Purpose to serve customers and build stronger communities
Assists with incident response activities related to high severity security threats or vulnerabilities.