CYBERSECURITY SPECIALIST

Versant Power; Bangor (ME); Vor Ort; USD 59.000 - 117.000; Vollzeit

Zusammenfassung

Versant Power in Bangor, ME is seeking a Cybersecurity Specialist to support NERC CIP compliance and cybersecurity programs for the Bulk Electric System. You will lead development, implementation, and testing of policies, procedures, and disaster recovery plans under the Manager, NERC Compliance.

You will collaborate with Corporate Cyber Security, OT, and IT teams, provide evidence for audits, and contribute to cyber security awareness across the organization.

Qualifikationen

• Associate degree in information technology or electrical engineering or related equivalent
• Three or more years of experience in information technology, cyber security, corporate compliance, OT, or other technical role in electric utility
• Certification in related subject matters such as CompTIA Security+, CompTIA Network+, Cisco CCNA, CISSP, CISM, or ITIL preferred or able to acquire within six months of hire
• Experience with network management and advanced network technologies
• Demonstrated knowledge of industry standards and frameworks (NERC CIP, ISO/IEC 27001, NIST, SOC 2 type 2)
• Project management or project lead experience required

Aufgaben

• Provide subject matter expertise on NERC CIP standards (CIP-005, CIP-007, CIP-012, CIP-015)
• Collaborate with Corporate Cyber Security, OT and IT teams to vet cyber security systems for BES
• Develop and maintain cyber security policies and procedures for NERC compliance
• Evaluate evidence sources and procedures for NERC compliance program
• Develop and test disaster recovery plans for CIP assets
• Analyze network diagrams, port configurations and service maps for risk and compliance
• Support development of procedures addressing cyber security and compliance
• Assist with cyber security awareness program
• Provide support for audits and regulatory planning sessions
• Participate in tabletop exercises and audit prep meetings

Kenntnisse

NERC CIP knowledge

Cyber security

Network management

Project management

Professional communication

Ausbildung

Associate degree in information technology or electrical engineering

Certifications: CompTIA Security+, CompTIA Network+, CISSP, CISM, ITIL

Jobbeschreibung

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

CYBERSECURITY SPECIALIST

Bangor, ME, US

Salary Range: $59,120.00 To $117,240.00 Annually

JOB TITLE: CYBERSECURITY SPECIALIST

LOCATION: BANGOR

REPORTS TO: MANAGER, NERC COMPLIANCE

Be a part of the team that is transforming the power industry of northern and eastern Maine.

Versant Power is building on our 100-year history of delivering efficient, safe and reliable electricity service to customers in northern and eastern Maine. We never lose sight of safety, quality, integrity and innovation.

We are committed to our dedicated people, who inspire us every day to deliver something more powerful than power alone.

POSITION OVERVIEW:

Under the general direction of the Manager, NERC Compliance, the Cybersecurity Specialist will provide support to the cybersecurity and compliance needs of the organization in accordance with the North American Energy Reliability Corporation (NERC) standards. Lead and assist with the development, implementation and maintenance of policies and procedures, cybersecurity systems, training supplementation, evidence collection, and program requirements to comply with all regulatory standards including those imposed by NERC to ensure the reliability and security of the electric grid.

ESSENTIAL FUNCTIONS:

• Provide subject matter expertise on NERC Critical Infrastructure Protection (CIP) standards with particular focus on standards CIP-005 Electronic Security Perimeter, CIP-007 System Security Management, CIP-012 Communications Between Control Centers, and CIP-015 Internal Network Security Monitoring
• Collaborate with Corporate Cyber Security, Operational Technology (OT), and Information Technology (IT) teams to vet the development, implementation, and monitoring of cyber security systems protecting the Bulk Electric System (BES)
• Assist Cyber Security team with development of cyber security policies and procedures as an advocate for NERC Compliance
• Evaluate technical evidence, their sources, and procedures for collection in support of the NERC compliance program
• Ensure the development and testing of disaster recovery plans for NERC CIP assets
• Assess project plans for technical components impacting CIP assets and/or labor performed within CIP areas
• Analyze network diagrams, port configurations, and service maps for risk and compliance
• Works collaboratively with various NERC subject matter experts to support development of procedures and processes which align with NERC standards in relation to cyber security.
• Assist with development of cyber security awareness program
• Provides support for internal and external audits as they arise
• Participates in regulatory compliance planning sessions, tabletop exercises, and audit preparation meetings.

ADDITIONAL RESPONSIBILITIES:

• Other related duties as assigned, including designated duties associated with Storm Restoration.

REQUIRED OR PREFERRED EDUCATION, CERTIFICATIONS, EXPERIENCE, KNOWLEDGE, SKILLS, AND ABILITIES:

• Associate degree in information technology or electrical engineering or educational equivalents such as certifications or experience working in information technology, cyber security, corporate compliance, operational technology, or other technical position within electric utility.
• Strong attention to detail with focus on thorough inspection practices and comprehensive documentation.
• Understanding of computer networking technologies or Supervisory Control and Data Acquisition systems.
• A functional collaborator willing to assume a support role or provide leadership as needed.
• Ability to communicate professionally and effectively with staff, vendors, law enforcement, emergency services, and the general public.
• Meet all criteria listed for Tier I.
• Three or more years of experience working in information technology, cyber security, corporate compliance, operational technology, or other technical position within electric utility.
• Certification in related subject matters such as CompTIA Security+, CompTIA Network+, Cisco Certified Network Associate, CISSP, CISM, or ITIL preferred or ability to acquire certification within six months of hire or promotion.
• Experience with network management and advanced network technologies required.
• Meet all criteria listed for Tier I and II.
• Five years or more of experience working in information technology, cyber security, corporate compliance, operational technology, or other technical position within electric utility.
• Certification in related subject matter required.
• Demonstrated knowledge of industry standards and frameworks, such as NERC CIP, ISO/IEC 27001, NIST, or SOC 2 type 2.
• Project management or project technical lead experience required.

NOTES:

• Position is primarily stationary, with some walking, standing, and driving required
• Position may require irregular hours

RATE OF PAY:

Salary Level is commensurate with experience and qualifications.

APPLICATION INFORMATION:

Non-Bargaining Unit, Regular and Term employees who have at least six (6) months satisfactory job performance and attendance records in their current job are eligible to apply for posted positions.

This job description is subject to change at any time.

Versant Power is a drug-free, tobacco-free and fragrance-free workplace.

Versant Power is an equal opportunity employer.