Sr Analyst/IS Compliance

Southwest Gas • Las Vegas, NV

99d • $82,926 - $120,278

About The Position

The Senior Analyst/IS Compliance (Analyst) is responsible for providing Information Technology (IT) and Operational Technology (OT) security governance and risk mitigation support for Southwest Gas Corporation (SWG). The Analyst is responsible for ensuring controls are in place to provide and maintain a secure and regulatory compliant technology environment by focusing on all aspects of data compliance, with an emphasis on Sarbanes Oxley (SOX), Transportation Security Administration (TSA), personal information security and recommendations of security solutions used to mitigate risk all while ensuring compliance with Company policies and procedures. This position may provide task direction for others on assigned projects of any complexity and scope.

Requirements

• Four to six years of relevant work experience.
• Bachelor of Science degree in Information Systems, Management Information Systems, Regulatory, Compliance or Computer Science or a related field.
• CISSP and/or CISA certification is preferred.

Responsibilities

• Coordinate and evaluate audits and reviews of various IT applications and systems conducted to ensure information security processes and procedures are effective and prepare reports of findings for review by management including recommended remediation, as necessary.
• Conduct periodic reviews of information security policies, procedures, and compliance and prepare reports of findings for review by management.
• Participate in the maintenance of the Security Risk Assessment Model and the Risk Register.
• Oversee third-party risk.
• Coordinate the annual Risk Assessment review and operational audits.
• Assist with the development and implementation of information classification and control policies and procedures.
• Remain current with changes in the information resources security legislation and regulation.
• Assist various business units to implement and maintain information resources security.
• Conduct periodic audits of various applications and systems to ensure information security processes and procedures are effective.
• Assist with the investigation, documentation, and response to all suspected information security events.
• Develop standards and department procedures.
• Provide input/oversight in the department's activities/responsibilities including planning, scheduling, staffing, monitoring, traveling and reporting.
• Identify, document and communicate risk and mitigation tactics to business leaders so that it can be incorporated into their business decision making process.
• Interface with end-users and other business units to develop new and maintain existing controls and practices, mitigate risk and resolve vulnerabilities as needed.
• Perform related duties and responsibilities as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Utilities
• Education Level: Bachelor's degree