Senior Information Security Controls Analyst

MISO•Carmel, IN

3h•$105,000 - $130,000•Onsite

About The Position

As MISO’s Senior Information Security Controls Analyst, you’ll have a direct and lasting impact on the strength, resilience, and maturity of the organization’s security program by shaping how security controls are designed, implemented, and optimized. Your work will influence enterprise-wide risk reduction, ensuring critical security objectives are met while continuously improving how the organization identifies and manages cyber risk. By partnering closely with control owners, Internal Audit, Regulatory Compliance, IT, and business teams, you’ll help embed security into everyday processes and initiatives. You’ll elevate cybersecurity awareness, inform data-driven decisions through meaningful metrics, and help the organization’s security strategy in response to evolving threats and regulatory expectations.

Requirements

Bachelor’s degree in Information Systems Management, Information Technology, Cybersecurity or related field.
A minimum of five years of experience in information security risk and compliance with deep knowledge of risks and controls.
Strong knowledge of cybersecurity frameworks and applying NIST CSF, NIST 800-53, and NERC CIP standards, with hands-on experience conducting security control assessments and implementing risk management methodologies.
Experience implementing and maturing security programs through the effective application of security controls.

Responsibilities

Design, implement, and continuously enhance the cybersecurity controls framework, ensuring alignment with industry standards, best practices, and regulatory requirements.
Assess and manage cyber risk by evaluating the effectiveness of security controls, conducting risk assessments, identifying vulnerabilities, and recommending appropriate mitigation strategies.
Partner cross-functionally with IT, Regulatory Compliance, and business teams to integrate security controls into enterprise processes and systems, serving as a trusted cybersecurity subject matter expert.
Monitor, report, and communicate security performance by developing metrics and dashboards, tracking control effectiveness, and staying current on emerging threats, trends, and regulatory changes.
Provide best practice guidance to IT Security control owners to help them maintain their controls and prepare for audits.