IT Cybersecurity Specialist

Duck River Electric; Shelbyville (TN); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Group medical, dental, vision

Employer-sponsored retirement plan

Tuition reimbursement

Job summary

Duck River Electric Membership Corporation (DREMC) in Shelbyville, TN is seeking an IT Cybersecurity Specialist to protect, monitor, and continually improve the cooperative’s cybersecurity posture. This hands-on role requires implementing security controls and coordinating across IT and external partners.

You will lead threat monitoring, risk assessments, and policy development while aligning with regulatory and operational requirements.

Qualifications

• Bachelor’s degree in CS/IT/MIS or related field with five years of cybersecurity experience.
• Industry certifications such as CompTIA Security+, CISSP, CISM, or CEH preferred.
• Must possess or be able to obtain a Tennessee Driver’s License and be insured for driving.
• Familiar with NIST CSF, CIS Controls, and security baselines; strong documentation skills.

Responsibilities

• Plan, implement, and continuously improve cybersecurity controls across networks, systems, endpoints, apps, and cloud.
• Monitor security tools to identify, investigate, and respond to threats and incidents.
• Administer firewalls, endpoint protection, IAM, vulnerability scanners, and logging/monitoring solutions.
• Conduct risk and vulnerability assessments and coordinate remediation with IT and vendors.
• Develop and enforce cybersecurity policies, standards, and baselines.
• Maintain up-to-date cybersecurity documentation including incident reports and risk assessments.

Skills

Threat monitoring

Network security

Endpoint security

Identity access

Vulnerability management

Incident response

Security documentation

Education

Bachelor's degree in CS/IT/MIS

5 years cybersecurity experience

Tools

Firewalls

Endpoint protection

IAM platforms

Vulnerability scanners

Logging/monitoring tools

Job description

DREMC is seeking an IT Cybersecurity Specialist

BE A PART OF POWERING SOUTHERN MIDDLE TENNESSEE!

Duck River Electric Membership Corporation (DREMC) is a member-owned electric cooperative, serving an area of approximately 2,500 square miles across 17 counties in southern middle Tennessee. Our amazing team at DREMC distributes safe and reliable electricity at the lowest possible cost, promotes and facilitates economic development, and enhances the quality of life of over 87,000 members (and growing) across 6,500 miles of line.

Location: Shelbyville, TN

Job purpose:

The IT Cybersecurity Specialist is responsible for the protection, monitoring, and continuous improvement of the Cooperative’s cybersecurity posture. This position serves as the primary hands on technical resource for cybersecurity operations, directly implementing and managing security controls that reduce risk, safeguard critical systems and data, and support regulatory, operational, and business requirements.

Job Dimensions:

Internal Responsibility — Collaborates with internal departments and IT staff to ensure cybersecurity controls are effectively integrated into business operations, projects, and processes. Serves as a subject matter expert on cybersecurity risks, controls, and best practices while supporting business continuity and operational resilience.

External Responsibility — Coordinates with external vendors, service providers, auditors, and business partners regarding cybersecurity tools, assessments, and services. Provides technical oversight to help ensure external solutions and services align with the Cooperative’s cybersecurity standards, risk management objectives, and operational requirements.

PRINCIPAL ACCOUNTABILITIES

• 1.Plan, implement, manage, and continuously improve cybersecurity controls across networks, systems, endpoints, applications, and cloud services.
• 2.Monitor security tools and platforms to identify, investigate, and respond to cybersecurity threats and incidents.
• 3.Administer and support security technologies, including firewalls, endpoint protection, identity and access management, vulnerability scanning, and logging/monitoring solutions.
• 4.Conduct regular risk assessments, vulnerability assessments, and security reviews; coordinate remediation efforts with IT staff and vendors.
• 5.Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security baselines aligned with industry best practices.
• 6.Maintain accurate and current cybersecurity documentation, including incident reports, risk assessments, and security architecture diagrams.
• 7.Support cybersecurity incident response activities, including investigation, containment, recovery, and post‑incident analysis.
• 8.Apply and promote cybersecurity frameworks and best practices, including the NIST Cybersecurity Framework and CIS Controls, when implementing and evaluating security controls.
• 9.Support disaster recovery, business continuity, and data protection initiatives from a cybersecurity perspective.
• 10.Evaluate and recommend cybersecurity tools, technologies, and process improvements in alignment with organizational objectives.
• 11.Review proposed technology solutions, projects, and system changes to ensure cybersecurity requirements are properly considered and implemented.
• 12.Communicate cybersecurity risks and recommendations clearly to technical and non‑technical stakeholders.
• 13.Develop and support cybersecurity awareness and training initiatives to promote a culture of security throughout the Cooperative.
• 14.Special projects as assigned.
• 15.Emergency response coverage as needed.

MINIMUM REQUIREMENTS

Education and Experience — Bachelor’s degree from an accredited college or university in computer science, information technology (IT), management information systems (MIS) or a related field and five (5) years of experience as a Cybersecurity Specialist or related role.

Experience in Lieu of Education — Thirteen (13) years of experience as a Cybersecurity Specialist or related role.

Certification/License, etc. — Industry certifications such as CompTIA Security+, ISC2 CISSP, ISACA CISM, EC-Council CEH, or equivalent are preferred. Must possess or be able to obtain a valid Tennessee Driver’s License. Must be eligible and remain insured as a driver by the Cooperative’s group liability policy for the automotive fleet.

Knowledge/Skills/Abilities — Knowledge of current cybersecurity threats, trends, and defensive techniques. Strong understanding of network security, endpoint security, identity and access management, and security monitoring concepts. Experience with cybersecurity documentation, policies, risk assessments, and vulnerability management. Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework. Familiarity with LAN, WAN, cloud, and mobile-based systems. Ability to analyze security data and respond effectively to incidents. Possess effective oral and written communication skills. Ability to prioritize, manage multiple tasks, and meet deadlines.

Physical Requirements — Frequently required to sit for extended periods while working on a computer or reviewing systems data. Regular use of hands and fingers for typing and handling documents or technical tools. Visual acuity required to read and interpret complex spreadsheets, reports, and system dashboards. Must be able to communicate clearly and effectively in person, over the phone, and in written communications. Occasionally required to stand, walk, bend, or lift up to 50 pounds (such as laptops, network hardware, backup batteries). May require extended focus and concentration when analyzing data or configuring systems.

Work Environment — Work is primarily performed in a quiet, professional office environment with standard climate control and lighting. The position requires frequent use of computers, cybersecurity monitoring platforms, network management tools, phones, and office equipment. Occasional meetings with internal departments may take place in person or virtually. Limited travel may be required for training, vendor meetings, or collaboration with other office locations. Work may involve periods of increased pressure during reporting cycles, audits, or system implementation phases.

This job description is intended to identify the essential functions of a position and should not be interpreted as all-inclusive.An employee may be required to perform other reasonably related business duties as assigned by immediate supervisor and/or management as needed.DREMC reserves the right to revise or change the job description as the need arises, or work schedules based on their duty to accommodate individuals with disabilities.This job description does not constitute a written or implied contract of employment.

EEOC: 2-PROFESSIONAL | Non-Supervisory | Pay Grade: 13 | Exempt | No residency requirement

BENEFITS:

• DREMC provides a comprehensive program of employee benefits, including group medical, dental, vision, employer-sponsored medical clinic, life and long-term disability insurance programs, defined benefit retirement and 401K savings plans, and tuition reimbursement.

Equal Opportunity Employer EOE/AA M/F/D/V