Cyber Security Operations Analytics and Reporting

LaBella Associates; City of Rochester (NY); Hybrid; USD 85,000 - 110,000; Full time

Benefits offered by this job

Health Insurance

401k Plan with Employer Match

Paid Time Off

Tuition Reimbursement

Job summary

LaBella Associates is hiring an Analytics and Reporting professional for our Rochester, NY office to support Third Party Risk Management within Corporate Security. This role focuses on safeguarding vendor engagements through risk reviews and compliance monitoring.

The analyst will work with SMEs to implement program improvements, document management processes, and regulatory controls, contributing to the Avangrid Security Program and related policies.

Qualifications

• Master’s degree with 4+ years relevant experience or;
• Bachelor’s degree with 6+ years relevant experience or;
• Associated degree with 8+ years relevant experience
• At least 4 years of experience in compliance management role

Responsibilities

• Assist in gathering data, performing administrative functions, and providing reports for the Avangrid Security Program.
• Analyze and revise client compliance program infrastructure including policies, programs, and procedures related to NERC CIP Standards and the Avangrid Security Program.
• Maintain applicable NERC-CIP-013 controls and actions.
• Review vendor requests, ensure documentation, and recommend risk exceptions where needed.
• Develop expertise in OneTrust and Kaseware to document TPRM processes and document management.
• Collaborate with SMEs to evaluate TPRM processes, discuss AI enhancements, and improve workflow and system.
• Compile data and metrics weekly to provide status updates on vendor submissions, team feedback, and documentation.
• Support continuous process improvement and update operational policy documentation.

Skills

Regulatory compliance

Data analysis

Report generation

Vendor management

FERC/NERC/NPCC rules

MS Office proficiency

Education

Master’s degree

Bachelor’s degree

Associate degree

Tools

OneTrust

Kaseware

Microsoft Office

Job description

LaBella Associates was established in 1978 and is a certified Great Place to Work. We are headquartered in Rochester, NY with offices across New York, Ohio, Pennsylvania, Connecticut, Maine, Virginia, North and South Carolina, and Madrid, Spain. LaBella is a multi-disciplined architectural and engineering firm dedicated to client satisfaction through teamwork, respect, and trust. We provide services that take a project from start to finish—from an initial study to determine a project’s feasibility to construction administration and start up, and everything in between.

We are currently hiring an Analytics and Reporting position in our Program Management Services division at our client’s Rochester office(5 days in office).

The primary responsibility of the Cyber Analytics and Reporting will be to Support the Senior Manager of Third Party Risk Management in Corporate Security to protect the client’s network and data by ensuring all company purchases complete a third-party risk review. . The Analyst works with Subject Matter Experts and management to provide specialized technical expertise and support for compliance program development and compliance performance tracking and reporting.

Salary Range:$85,000 - $110,000

The specific salary offered may be influenced by a variety of factors including but not limited to the candidate's relevant experience, education, and work location.

Responsibilities

• The primary goal of the Cyber Analytics and Reporting is to assist in gathering data, performing administrative functions, and providing reports as they relate to the Avangrid Security Program.
• Analyze and revise as needed client compliance program infrastructure including the administration and maintenance of compliance policies, programs, and procedures related to the NERC CIP Standards and the Avangrid Security Program
• Maintain applicable NERC-CIP-013 controls and associated actions.
• Review business area vendor requests, ensure proper documentation is submitted, work with business areas to correct missing documentation, and recommend risk exceptions where needed.
• Develop expertise in OneTrust and Kaseware to fully document TPRM processes and document management.
• Work with application subject matter experts to evaluate the TPRM process, discuss AI enhancements, and improve the workflow and system.
• Compile data and metrics on a weekly basis to provide reportable information to communicate the status of vendor submissions, team feedback, and documentation.
• Continuous process improvement activities as required to align with corporate policies.
• Complete additional assigned duties/task as needed. Assist in maintaining and updating operational policy and procedure documentation.
• Assist in the review and updates of policies and procedures in conjunction with SME
• Conduct annual document management reviewed and updates to demonstrate standards compliance
• Help to ensure effective regulatory compliance to the North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards
• Monitor regulatory changes and work closely with the SMEs to determine impacts and ensure compliance.
• Preparing for, coordinate and support meetings with internal resources, consultants or regulatory organizations
• Other duties as assigned

Education and Experience Required

• Master’s degree with 4+ years relevant experience or;
• Bachelor’s degree with 6+ years relevant experience or;
• Associated degree with 8+ years relevant experience
• At least 4 years of experience in compliance management role

Skills / Abilities

• Ability to understand and analyze FERC/NERC/NPCC regulatory requirements
• Able to work independently and exercise considerable judgment and decision-making
• Able to work under tight deadlines with changing priorities
• Advanced in Microsoft Office tools, including Outlook, Excel, PowerPoint, and Word
• Demonstrated effectiveness in building relationships with diverse groups
• Excellent written and verbal communication skills
• Exceptional teamwork and interpersonal skills to aid in the resolution of compliance issues
• Experience developing and implementing new or significantly revised programs
• Good problem-solving and analytical skills
• Proficient with PC skills and programs
• Superior analytical abilities involving complex problems; exercise sound judgment

Desired Skills / Abilities

• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Excellent interpersonal skills
• Excellent written and oral communication skills
• Experience with audits and reviewing evidence to ensure compliance
• Experience with conducting root cause analyses
• Extensive experience working in a team- oriented, collaborative environment
• Keen attention to detail
• Strong leadership skills
• Training experience

Benefits

Body, mind, and wallet—LaBella’s benefits support a holistic approach to your health and wellness, creating the foundation for physical, mental, and financial well-being. Our benefit offerings cover the must-haves (healthcare and retirement), the just-in-cases (insurances and employee assistance programs), and the cherry-on-tops (fitness reimbursements, year-end incentive pay, and tuition assistance). Visit our website for more details on benefits listed below.

• Flexible Work Schedule
• Health/Dental Insurance
• 401k Plan with Employer Match
• Short & Long Term Disability
• Profit Sharing
• Paid Time Off
• Leadership Development Program
• Fitness Reimbursement
• Tuition ReimbursementReferral Bonus Program
• Wellness Program
• Team Building Events
• Community Service Events
• Paid Parental Leave

Culture and Diversity

LaBella is committed to facilitating a culture where diversity, equity, and inclusion are respected, valued, and celebrated by implementing thoughtful, practical, and innovative strategies that support our employees and serve the communities in which we reside. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws.