Generation Cyber Security & Compliance Analyst (Sr or Mid level) Hybrid

Dominion Energy; United States; Hybrid; USD 73,000 - 118,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Vacation

401k with matching

Tuition reimbursement

Bonus eligibility

Sick leave

Disability insurance

Job summary

Dominion Energy is seeking a Generation Cyber Security & Compliance Analyst (Senior or Mid) in a hybrid role. The job focuses on developing cyber security and compliance solutions, with emphasis on NERC CIP procedures and program evidence reviews.

The role works across IT and Generation to strengthen security controls and regulatory readiness.

Qualifications

• 5+ years in Cyber Security or OT (Distributed Control Systems) and Strong project management skills.
• Demonstrated ability to communicate clearly with diverse audiences.
• Ability to manage multiple deadlines and coordinate multi-project assignments.
• Knowledge of cyber security controls, architectures and regulatory requirements.
• Experience with security technologies including firewalls, logging/monitoring, malware prevention and incident response.

Responsibilities

• Develops cyber security and compliance solutions to address threats and gaps.
• Develops CIP procedures and guidelines for NERC CIP programs.
• Reviews NERC CIP program evidence for compliance readiness.
• Provides training on cyber security and compliance tools to Generation employees.
• Supports implementation of security policies, standards and controls across Generation.

Skills

Verbal communication

Written communication

Presentation skills

Project management

Multi-project coordination

Analytical thinking

Problem solving

Independent judgment

Education

Bachelor

Tools

Firewalls

Security analytics

Windows security

Incident analysis

SCADA/OT security

Job description

Select how often (in days) to receive an alert: Create Alert

Generation Cyber Security & Compliance Analyst (Sr or Mid level) Hybrid

We offer a hybrid 3-2 work schedule (three days in the office, two days of teleworking) to accommodate the need for flexibility.

Military service members and veterans with ranks from E5-E9, W1-CW5, or O3-O6, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity.
At this time, Dominion Energy cannot transfer or sponsor a work visa or employment authorization for this position.

Job Summary

Works under the direction of Generation Regulatory Compliance management to assist in development of compliance and cyber security solutions which address threats and potential compliance gaps. Develops NERC Cyber Security - Critical Information Protection (CIP) procedures and guidelines. Reviews Generation NERC CIP program evidence for compliance readiness. Responsible for cyber security management solutions and monitoring current processes to determine what is acceptable and not acceptable, not only from a cyber security perspective but also from a compliance perspective. Provides training to Generation employees on cyber security and compliance applications and tools. Works closely with Generation power station personnel and generation support organizations, interfaces with all groups in IT support organizations, contributes to the development of cyber security strategies to implement threat prevention and mitigation capabilities, and to maintain operational situational awareness of the Generation cyber security landscape. Recommends and supports the implementation of cyber security policies, architectures, technical standards, technical controls, security solutions, guidelines, procedures, and other elements necessary to maintain Generation's cyber security and compliance posture. Make recommendations for adopting new technical solutions and procedures. Maintain an awareness of regulatory requirements, industry trends, and the potential impacts to Generation policies, standards, and procedures. Must be able to coordinate multi-project assignments. Must have a detailed understanding of cyber security processes and technologies. Must have a detailed understanding of the following cyber security solutions:

• Network perimeter controls, including next generation firewalls, routers, and malware prevention
• Security technologies, including firewalls, logging and monitoring tools, antivirus tools, malware prevention, incident response tools, and security analytics platforms;
• Security features and system administration of Windows operating systems
• Incident analysis, root cause analysis, forensics analysis, and problem resolution
• Must have an understanding of process control and SCADA networks and the differences from IT systems when applying cyber security controls
• Must have an understanding of workstation and server security and protection
• Knowledge in multiple areas of information technology, including security, networks and computing applications
• Experience in security aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Exercises independent judgment and decision-making in planning, organizing and conducting work assignments.
  

The knowledge, skills, abilities and experience required for entry into this job include the following:

Generation Cyber Security & Compliance Analyst (Senior): 5+ years in Cyber Security or Operational Technology which is distributed control systems, connectivity and non-PC based systems Strong project management skills

Generation Cyber Security & Compliance Analyst (Mid): 3+ years in Cyber Security or Operational Technology which is distributed control systems, connectivity and non-PC based systems

(A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)

• Demonstrated competency in verbal, written, and presentation communications.
• Demonstrated ability to establish and maintain a high level of customer trust and confidence.
• Demonstrated ability to work with all levels of employees and to influence and impact others.
• Demonstrated organization and planning skills that include project coordination and management and the ability to manage multiple deadlines.
• Demonstrated competency in developing effective solutions to business problems.
• Demonstrated ability to analyze problems and to think logically.
• Demonstrate experience as technical expert in field.
• Experience in the adaptation to, and the application of, rapidly changing technology to meet business needs.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education: Bachelor

Preferred Discipline(s): Engineering, Information Systems, Computer Science

Other disciplines may be substituted for the preferred discipline(s) listed above.

Working Conditions

Travel Up to 25%

Other Working Conditions

Regular travel including overnight trips; regular visits to construction sites.

Export Control

Certain positions at Dominion Energy may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in Dominion Energy limiting its consideration of certain applicants.

What You'll Get

Expected Hiring Base Salary Range:

Sr Generation Cyber Security & Compliance Analyst: $90900 - $118100

Generation Cyber Security & Compliance Analyst: $73200 -$95000

The expected hiring base salary range is the range we anticipate hiring within for this position. The actual salary offered may vary based on factors such as the selected candidate’s qualifications, skills, experience, and work location. This is not intended to represent the full salary range for the position or limit future compensation growth.

At Dominion Energy, we offer excellent plans and programs for employees. Employees are rewarded with a competitive salary and comprehensive benefits package which includes: health, dental, and vision benefits with coverage for families and domestic partners, vacation, retirement plans including 401k contributions and matches, paid holidays, tuition reimbursement, bonus eligibility, sick leave, and disability insurance.

Dominion Energy is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin and/or status as a protected veteran or individual with a disability.

You can experience the excitement of our company – it's the difference between taking a job and starting a career.

Top 3 Reasons to Work at Dominion Energy

Dominion Energy is committed to helping address climate change. We have cut emissions sharply as we aim for Net Zero carbon and methane emissions by 2050. Learn more at sustainability.dominionenergy.com

Job Segment: Computer Science, Environmental Engineering, Information Security, Project Manager, Information Systems, Technology, Engineering