Cyber Information Assurance Analyst I

Arizona Public Service Co.; Phoenix (AZ); On-site; USD 90,000 - 120,000; Full time

Job summary

Arizona Public Service Co. is seeking a role focused on designing and implementing information assurance and data security across applications, databases, and procedures. You will assess and mitigate data security risks and validate requirements through analysis.

You will support compliance, document controls, and collaborate with internal stakeholders and audit teams to strengthen the organization’s security posture and control environment.

Qualifications

• Bachelor's degree in computer science, business administration, finance, accounting or related field and one year of prior relevant experience or equivalent combination of education and directly related experience.
• Requires basic technical subject matter knowledge within a job area or system.
• Familiarity with information assurance concepts and security controls is expected.

Responsibilities

• Follows information security and data privacy framework controls to ensure protection of APS' sensitive information.
• Maintains and reconciles inventory of applications and databases containing sensitive information to embed privacy by design into projects.
• Performs risk management tasks, identifying cybersecurity risks and assisting in mitigation processes.
• Participates in vendor risk management to assess risks of third parties with APS data.
• Assists in monitoring applications and databases for unusual activity.
• Performs basic data loss prevention reviews, monitoring data on premises and in the cloud.
• Supports implementation of technical standards, procedures and guidelines under supervision.
• Assists in collecting regulatory compliance evidence to show controls, policies and procedures.
• Supports security and privacy awareness initiatives for APS workforce.
• Utilizes systems to prevent cyber threats and data mis sharing.
• Reports security concerns to more senior analysts.
• Conducts research to solve information assurance problems.

Skills

NIST/CIP/GAPP

InfoSec fundamentals

Malware detection

Security program design

Education

Bachelor's degree in CS/IT or related field

Job description

Select how often (in days) to receive an alert:

Our present and future success depends on the creative and dedicated people of our company who demonstrate the principles outlined in the APS Promise: Design for Tomorrow, Empower Each Other and Succeed Together.

Summary

Responsible for the design and implementation of information assurance and data security in applications, software, databases, flat files and procedures. Assesses and mitigates data security threats and risks throughout the data life cycle and validates data security requirements through analysis.

Supportscompliance and audit activities by helping ensure appropriate data security controls, documentation, and processes are in place and operating effectively. Partners with internal stakeholders and audit teams to support control assessments, address findings, identify potential compliance gaps, and strengthen the organization’s security and control environment.

• Bachelors' degree in computer science, business administration, finance, accounting or related field and one (1) year of prior relevant experience or equivalent combination of education and directly related experience.
• Requires basic technical subject matter knowledge within a job area or system

Preferred Special Skills, Knowledge or Qualifications:

• Risk management and information security framework experience National Institute of Standards and Technology (NIST), Critical Infrastructure Protection (CIP) or Generally Accepted Privacy Principles (GAPP)
• Knowledge of network and information assurance; security and malware detection and prevention technologies; information assurance regulations and standards; compliance; and software (applications and programming); communication protocols; security design; Information Assurance Vulnerability Management program (IAVM) and other information assurance programs.
• Skill in design and implementation of information assurance programs; supporting secure systems operations.
• Ability to design and implement information assurance and security systems with multiple requirements, including but not limited to business continuity, physical security, data security; educate internal and external stakeholders on information assurance policies and practices.

Major Accountabilities

1) Follows information security and data privacy framework controls to ensure adequate protection procedures exist around APS' sensitive information.

2) Maintains and regularly reconciles the inventory of applications and databases containing sensitive information to build "privacy by design" into project and data lifecycle.

3) Performs risk management tasks, identifying cyber security risks and assisting in development of processes to mitigate them.

4) Participate in vendor risk management program; assess risk of vendors in possession of APS' sensitive information.

5) Assists in monitoring applications and databases for unusual activity.

6) Performs basic data loss prevention reviews, monitoring data received/sent on premises and/or via cloud solutions.

7) Participates in the implementation of technical standards, procedures and guidelines; receive oversight from more advanced analysts.

8) Assists in the coordination, design, evaluation and submission of critical regulatory compliance evidence required to show controls, solutions, policies and procedures.

9) Assists in security and privacy awareness efforts to educate APS' workforce on safe use and handling of data.

10) Utilizes systems that help prevent cyber threats such as data breaches or inadvertent over-sharing of data classified as sensitive.

11) Reports any current or future security concerns to more advanced analysts.

12) Conducts research and analysis to solve information assurance related problems that may include security risks
Key Level Differentiators:

• Works to achieve operational targets within IS and Cyber Information Assurance which has some impact on the overall achievement of results for the department.
• Work is of limited scope, typically on smaller, less complex projects/ assignments.
• Implements or supports projects/ assignments, under close supervision.
• Uses existing methods designed by other technical colleagues.
• Decisions made impact self and has low impact on own and related job family and department

Export Compliance / EEO Statement

This position may require access to and/or use of information subject to control under the Department of Energy's Part 810 Regulations (10 CFR Part 810), the Export Administration Regulations (EAR) (15 CFR Parts 730 through 774), or the International Traffic in Arms Regulations (ITAR) (22 CFR Chapter I, Subchapter M Part 120) (collectively, 'U.S. Export Control Laws'). Therefore, some positions may require applicants to be a U.S. person, which is defined as a U.S. Citizen, a U.S. Lawful Permanent Resident (i.e. 'Green Card Holder'), a Political Asylee, or a Refugee under the U.S. Export Control Laws. All applicants will be required to confirm their U.S. person or non-US person status. All information collected in this regard will only be used to ensure compliance with U.S. Export Control Laws, and will be used in full compliance with all applicable laws prohibiting discrimination on the basis of national origin and other factors. For positions at Palo Verde Nuclear Generating Stations (PVNGS) all openings will require applicants to be a U.S. person.

Pinnacle West Capital Corporation and its subsidiaries and affiliates ('Pinnacle West') maintain a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity in all phases of the employment process and in compliance with applicable federal, state, and local laws and regulations. This policy of nondiscrimination shall include, but not be limited to, recruiting, hiring, promoting, compensating, reassigning, demoting, transferring, laying off, recalling, terminating employment, and training for all positions without regard to race, color, religion, disability, age, national origin, gender, gender identity, sexual orientation, marital status, protected veteran status, or any other classification or characteristic protected by law.

For more information on applicable equal employment regulations, please refer to EEO is the Law poster. Federal law requires all employers to verify the identity and employment eligibility of every person hired to work in the United States, refer to E-Verify poster. View the employee rights and responsibilities under the Family and Medical Leave Act (FMLA).

Arizona Public Service is a smoke free workplace.

Home based:Home based employees primarily work from their home offices and come into an APS facility on an as-needed basis.

• Employees are expected to reside in Arizona (or New Mexico for Four Corners-based employees).
• Working from a home office requires adequate technology and an appropriate ergonomic set up.
• Role types are subject to change based on business need.