Lead Analyst, Cyber Security Compliance

TXU Energy (Vistra Corp); Irving (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

Vistra Corporate Services Company in Irving, Texas seeks a Lead Analyst to maintain regulatory compliance knowledge and develop, implement, and maintain program procedures, processes, and tools. You will interpret standards, summarize impact for executives, administer internal controls, and support internal/external audits.

The role emphasizes root-cause analysis, corrective actions, and driving efficient, automated compliance controls across technology and business units.

Qualifications

• College degree or certification in business or technology field, or equivalent experience.
• 7-10 years’ experience with NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA, NRC.
• Ability to be trustworthy and dependable.
• Strong reading comprehension and written communication skills.
• Demonstrate ability to learn quickly and tackle new challenges.
• Demonstrate ability to facilitate agreement across a wide range of disparate stakeholders.
• Working knowledge of application development or coding language such as VBA, PowerShell, Python, Ruby, C++, etc.

Responsibilities

• Perform duties with high accuracy and consistency.
• Accurately interpret regulations and design processes that ensure compliance without adding undue administrative burden to plant staff.
• Maintain positive relationships with plant teams, vendors, governmental agencies to promote cooperative work.
• Support technology key controls and regulatory requirements (i.e. ERCOT, NERC-CIP) and internal audit requirements.
• Identify opportunities for efficiency and automation within compliance controls.
• Support projects to meet performance, cost, and schedule targets while maintaining compliance.
• Support metrics processes that track the status of compliance and tool effectiveness and health.
• Participate in a departmental culture that fosters accountability for results and diversity.

Skills

Regulatory compliance

Audit support

Root cause analysis

Process design

Data analysis

Cross-stakeholder facilitation

Education

Bachelor's degree in business or technology field

Certifications: NERC CIP, ERCOT, ISO 27001, NIST 800-53, SOX, PCI, NACHA, NRC

Professional certifications (CISM, CISA, CISSP)

Tools

VBA

PowerShell

Python

Ruby

C++

Job description

Job Summary

Lead Analyst will maintain extensive knowledge of Vistra Compliance regulations. Develop, implement and maintain program procedures, processes and tools. Lead the development of interpretations of Standards and guidance documents to produce unambiguous descriptions of compliance obligations for internal stakeholders and summarize impact for company executives. Administer proprietary internal control system. Ensure required documentation to evidence compliance is accurate and effective. Facilitate internal and external audit activities. Investigate variances and elevate when needed. Perform root cause analysis in instances of non-compliance. Design and manage corrective action plans. Exercise critical thinking and problem solving to research and document processes supporting applicable regulations.

Job Description

Key Accountabilities

• Perform assigned duties with high degree of accuracy and consistency.
• Accurately interpret regulations and design processes that inherently result in compliance behavior and evidence without adding undue administrative burden to plant staff.
• Maintaining positive relationships with plant teams, vendors, governmental agencies, in order to promote cooperative working relationships.
• Support technology key controls and compliance with regulatory requirements (i.e. ERCOT, NERC-CIP, etc), and corporate technology management and internal audit requirements.
• Identify opportunities for efficiency and automation within compliance controls.
• Support projects such that they are deployed within performance, cost, and schedule targets without disrupting compliance requirements.
• Support metrics processes that track the status of compliance and compliance tool effectiveness and health.
• Participate in a departmental culture that fosters accountability for results while promoting the use of diverse backgrounds and experiences.

Education, Experience, & Skill Requirements

Required:

• Experienced gained through college degree programs and/or certification in business or technology related field, or equivalent experience.
• 7-10 years’ experience with an understanding in one or more of the following: NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA , NRC.
• Demonstrate ability to be trustworthy and dependable
• Exceptional reading comprehension and written communication skills
• Demonstrate ability to learn quickly, be self-motivated to improve knowledge base and tackle new challenges
• Demonstrate ability to facilitate agreement across a wide range of disparate stakeholders
• Demonstrate a working knowledge of application development or a coding technology language such as (VBA, PowerShell, Python, Ruby, C++, etc.)

Preferred:

• Experience withICS devices, Generation, Transmission assets
• Understand Human Performance Improvement principles
• Working knowledge of agile framework and methodologies
• Experience with Cloud security & compliance best practices
• Professional certification a plus (e.g., CISM, CISA, CISSP, Digital Design)

Key Metrics

Compliance Metrics:

• % of planned work completed on time and on-budget
• % of compliance controls completed on time
• % of control performance effectiveness
• % of control performance automation

Job Family

Information Technology

Company

Vistra Corporate Services Company

Locations

Irving, Texas

Texas

If you currently work for Vistra or its subsidiaries, please apply via the internal career site.

It is the policy of the Company to comply with all employment laws and to afford equal employment opportunity to individuals in all aspects of employment, including in selection for job opportunities, without regard to race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, disability, genetic information, military service, protected veteran status, or any other consideration protected by federal, state or local laws.

If you are an individual with a disability and need assistance submitting an application or would like to request an accommodation, please email [e-mail] a request.