IT Cybersecurity Specialist

Electric Co; Shelbyville (TN); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Employer-sponsored medical clinic

Life insurance

Long-term disability insurance

401(k) retirement plan

Tuition reimbursement

Job summary

DREMC is seeking an IT Cybersecurity Specialist in Shelbyville, TN to protect, monitor, and continually improve the cooperative's cybersecurity posture. The role serves as the hands-on technical resource for security controls and risk management, aligning with regulatory and business needs.

Responsibilities span monitoring, policy development, incident response, and collaboration with vendors and internal teams to safeguard critical systems and data across networks, endpoints, and cloud services.

Qualifications

• Bachelor’s degree in a related field and 5 years of cybersecurity experience preferred.
• Industry certifications such as Security+, CISSP, CISM, or CEH are preferred.
• Strong knowledge of cybersecurity threats, networks, endpoints, IAM, and security monitoring.

Responsibilities

• Plan, implement, manage, and improve cybersecurity controls across networks, systems, endpoints, apps, and cloud services.
• Monitor security tools to identify, investigate, and respond to threats and incidents.
• Administer security technologies including firewalls, IAM, vulnerability scanning, and logging/monitoring.
• Conduct risk and vulnerability assessments; coordinate remediation with IT and vendors.
• Develop, maintain, and enforce security policies, standards, and baselines.
• Maintain security documentation including incident reports and architecture diagrams.
• Support incident response activities from containment to post-incident analysis.
• Promote NIST Cybersecurity Framework and CIS Controls in controls implementation.
• Support disaster recovery and business continuity from a cybersecurity perspective.
• Evaluate tools and processes for alignment with objectives.
• Review proposed solutions to incorporate cybersecurity requirements.
• Communicate risks clearly to technical and non-technical stakeholders.
• Support cybersecurity awareness and training initiatives.

Skills

Network security

Endpoint security

Identity access management

Security monitoring

Risk assessments

Vulnerability management

Incident response

Communication skills

Education

Bachelor's degree in computer science / IT / MIS or related field

Five years of cybersecurity experience

Thirteen years of experience in lieu of education

Tools

CompTIA Security+

CISSP

CISM

CEH

Tennessee Driver’s License

Job description

DREMC is seeking an IT Cybersecurity Specialist

BE A PART OF POWERING SOUTHERN MIDDLE TENNESSEE!

Duck River Electric Membership Corporation (DREMC) is a member-owned electric cooperative, serving an area of approximately 2,500 square miles across 17 counties in southern middle Tennessee. Our amazing team at DREMC distributessafe and reliable electricityat the lowest possible cost, promotes and facilitateseconomic development, and enhances thequality of lifeof over 87,000 members (and growing) across 6,500 miles of line.

Location: Shelbyville, TN

Job purpose

The IT Cybersecurity Specialist is responsible for the protection, monitoring, and continuous improvement of the Cooperative’s cybersecurity posture. This position serves as the primary hands on technical resource for cybersecurity operations, directly implementing and managing security controls that reduce risk, safeguard critical systems and data, and support regulatory, operational, and business requirements.

Job Dimensions

Internal Responsibility — Collaborates with internal departments and IT staff to ensure cybersecurity controls are effectively integrated into business operations, projects, and processes. Serves as a subject matter expert on cybersecurity risks, controls, and best practices while supporting business continuity and operational resilience.

External Responsibility — Coordinates with external vendors, service providers, auditors, and business partners regarding cybersecurity tools, assessments, and services. Provides technical oversight to help ensure external solutions and services align with the Cooperative’s cybersecurity standards, risk management objectives, and operational requirements.

Principal Accountabilities

• 1. Plan, implement, manage, and continuously improve cybersecurity controls across networks, systems, endpoints, applications, and cloud services.
• 2. Monitor security tools and platforms to identify, investigate, and respond to cybersecurity threats and incidents.
• 3. Administer and support security technologies, including firewalls, endpoint protection, identity and access management, vulnerability scanning, and logging/monitoring solutions.
• 4. Conduct regular risk assessments, vulnerability assessments, and security reviews; coordinate remediation efforts with IT staff and vendors.
• 5. Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security baselines aligned with industry best practices.
• 6. Maintain accurate and current cybersecurity documentation, including incident reports, risk assessments, and security architecture diagrams.
• 7. Support cybersecurity incident response activities, including investigation, containment, recovery, and post‑incident analysis.
• 8. Apply and promote cybersecurity frameworks and best practices, including the NIST Cybersecurity Framework and CIS Controls, when implementing and evaluating security controls.
• 9. Support disaster recovery, business continuity, and data protection initiatives from a cybersecurity perspective.
• 10. Evaluate and recommend cybersecurity tools, technologies, and process improvements in alignment with organizational objectives.
• 11. Review proposed technology solutions, projects, and system changes to ensure cybersecurity requirements are properly considered and implemented.
• 12. Communicate cybersecurity risks and recommendations clearly to technical and non‑technical stakeholders.
• 13. Develop and support cybersecurity awareness and training initiatives to promote a culture of security throughout the Cooperative.
• 14. Special projects as assigned.
• 15. Emergency response coverage as needed.

Minimum Requirements

• Education and Experience — Bachelor’s degree from an accredited college or university in computer science, information technology (IT), management information systems (MIS) or a related field and five (5) years of experience as a Cybersecurity Specialist or related role.
• Experience in Lieu of Education — Thirteen (13) years of experience as a Cybersecurity Specialist or related role.
• Certification/License, etc. — Industry certifications such as CompTIA Security+, ISC2 CISSP, ISACA CISM, EC-Council CEH, or equivalent are preferred. Must possess or be able to obtain a valid Tennessee Driver’s License. Must be eligible and remain insured as a driver by the Cooperative’s group liability policy for the automotive fleet.
• Knowledge/Skills/Abilities — Knowledge of current cybersecurity threats, trends, and defensive techniques. Strong understanding of network security, endpoint security, identity and access management, and security monitoring concepts. Experience with cybersecurity documentation, policies, risk assessments, and vulnerability management. Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework. Familiarity with LAN, WAN, cloud, and mobile-based systems. Ability to analyze security data and respond effectively to incidents. Possess effective oral and written communication skills. Ability to prioritize, manage multiple tasks, and meet deadlines.

Physical Requirements

Frequently required to sit for extended periods while working on a computer or reviewing systems data. Regular use of hands and fingers for typing and handling documents or technical tools. Visual acuity required to read and interpret complex spreadsheets, reports, and system dashboards. Must be able to communicate clearly and effectively in person, over the phone, and in written communications. Occasionally required to stand, walk, bend, or lift up to 50 pounds (such as laptops, network hardware, backup batteries). May require extended focus and concentration when analyzing data or configuring systems.

Work Environment

Work is primarily performed in a quiet, professional office environment with standard climate control and lighting. The position requires frequent use of computers, cybersecurity monitoring platforms, network management tools, phones, and office equipment. Occasional meetings with internal departments may take place in person or virtually. Limited travel may be required for training, vendor meetings, or collaboration with other office locations. Work may involve periods of increased pressure during reporting cycles, audits, or system implementation phases.

This job description is intended to identify the essential functions of a position and should not be interpreted as all-inclusive. An employee may be required to perform other reasonably related business duties as assigned by immediate supervisor and/or management as needed. DREMC reserves the right to revise or change the job description as the need arises, or work schedules based on their duty to accommodate individuals with disabilities. This job description does not constitute a written or implied contract of employment.

EEOC

2-PROFESSIONAL | Non-Supervisory | Pay Grade: 13 | Exempt | No residency requirement

Position description effective date: August 2026

Benefits

BENEFITS:DREMC provides a comprehensive program of employee benefits, including group medical, dental, vision, employer-sponsored medical clinic, life and long-term disability insurance programs, defined benefit retirement and 401K savings plans, and tuition reimbursement.

Equal Opportunity Employer EOE/AA M/F/D/V