IT Security Analyst

Description

• Coordinates event and root cause analysis to identify gaps in controls including advising and supporting management in defining appropriate remedial actions and tracking.
• Performs assessments, helps the organization institute, and monitor compliance with cybersecurity framework and regulatory requirements.
• Maintains accurate and up-to-date documentation related to NERC CIP Compliance, and other compliance frameworks.
• Plays a role in complex problem analysis and makes recommendations for how to advance PPL’s cybersecurity compliance profile and culture with a team of motivated individuals.
• Provides high level research on internal projects, recommending strategic directions and plans that address company-wide security issues. This includes projects related to CIP implementations.
• Balances security best practices and business drivers against framework requirements, business risk, and impact to make recommendations that minimize PPL’s risk profile.
• Identifies opportunities for continuous improvement in Cybersecurity’s compliance program.
• Supports teams in regulatory audits, spot-checks, and self-certifications including mock audits.
• Participates in compliance activities including providing consulting assistance with business areas and IT groups for cybersecurity compliance standards, policies, procedures, and measures.
• Assists in preparing for compliance audits where responsibilities include developing Reliability Standard Audit Worksheets (RSAWs) and compiling supporting evidentiary documentation.
• Collaborates with relevant stakeholders in the development of audit responses and remediation plans for any identified findings.
• Contributes to developing, implementing, and evaluating project plans, goals, and timelines for the implementation of internal controls across all applicable standards.

Requirements

• Experience preparing and presenting complex topics to non-technical audiences, at various levels within the organization.
• Collaborative and effective in cross-functional team environments.
• Experience in examining and evaluating internal controls based on regulatory requirements to ensure adherence to the requirements is performed.
• Working knowledge of security related frameworks and activities including, but not limited to, NIST Cybersecurity Framework, SOC 1, SOC 2, etc.
• Demonstrated ability to lead projects and assignments and perform multiple activities concurrently.
• Critical thinking skills with the ability to identify and solve complex problems with limited managerial oversight.
• Experience with applying compliance frameworks, to successfully comply with security policies, standards, and guidelines.
• Bachelor’s degree in Computer Science, Information Security, and/or a related field or an equivalent level of work related experience.
• Effective written, verbal, and interpersonal communication skills along with outstanding attention to detail with dedication to encouraging a culture of compliance and security.
• Effectively communicates with clients, peers and management in security matters in both verbal and written form.
• Strong analytical skills to assess risks and vulnerabilities in complex systems.
• Understanding of requirements gathering, discovery, service mapping, problem management, asset management, project management, and service catalogs as they relate to regulatory compliance.
• Proven experience establishing, managing, and validating compliance requirements with internal and external parties.
• Experience with NERC CIP regulatory requirements, such as standards development, controls framework development, or compliance.
• 2 or more years of work experience in a compliance or audit focused position or equivalent (Intermediate)
• Experience creating, implementing, and documenting internal processes and technology to enhance compliance, efficiency, and education.
• 5 or more years of work experience in a compliance or audit focused position or equivalent (Senior)

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance