Lead Analyst, Cyber Security Compliance

TXU Energy; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Vistra is seeking a Lead Analyst to maintain knowledge of compliance regulations, develop and maintain program procedures, and interpret standards for internal stakeholders. You will administer internal controls and support internal/external audits, investigating variances and driving corrective actions.

The role requires 7–10 years of experience in regulatory frameworks (NERC CIP, ERCOT, ISO 27001, NIST 800-53, SOX, PCI) and strong analytical, communication, and collaboration skills across

Qualifications

• College degree or certification in business or technology-related field, or equivalent experience.
• 7-10 years' experience with one or more: NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA, NRC.
• Demonstrates trustworthiness and dependability.
• Excellent reading comprehension and written communication.

Responsibilities

• Interpret regulations and design processes that promote compliant behavior with minimal administrative burden on plant staff.
• Lead development and maintenance of procedures, processes, and tooling for compliance.
• Interact with plant teams, vendors, and agencies to maintain cooperative relationships.

Skills

Regulatory compliance

NERC CIP

ERCOT Protocols

ISO 27001

NIST 800-53

SOX PCI

Coding languages

Agile methodologies

Cloud security & compliance

Human Performance Improvement

VBA

PowerShell

Python

Ruby

C++

Education

College degree in business or technology or equivalent experience

Job description

Job Summary

Lead Analyst will maintain extensive knowledge of Vistra Compliance regulations. Develop, implement and maintain program procedures, processes and tools. Lead the development of interpretations of Standards and guidance documents to produce unambiguous descriptions of compliance obligations for internal stakeholders and summarize impact for company executives. Administer proprietary internal control system. Ensure required documentation to evidence compliance is accurate and effective. Facilitate internal and external audit activities. Investigate variances and elevate when needed. Perform root cause analysis in instances of non-compliance. Design and manage corrective action plans. Exercise critical thinking and problem solving to research and document processes supporting applicable regulations.

Key Accountabilities

• Perform assigned duties with high degree of accuracy and consistency.
• Accurately interpret regulations and design processes that inherently result in compliance behavior and evidence without adding undue administrative burden to plant staff.
• Maintaining positive relationships with plant teams, vendors, governmental agencies, in order to promote cooperative working relationships.
• Support technology key controls and compliance with regulatory requirements (i.e. ERCOT, NERC-CIP, etc), and corporate technology management and internal audit requirements.
• Identify opportunities for efficiency and automation within compliance controls.
• Support projects such that they are deployed within performance, cost, and schedule targets without disrupting compliance requirements.
• Support metrics processes that track the status of compliance and compliance tool effectiveness and health.
• Participate in a departmental culture that fosters accountability for results while promoting the use of diverse backgrounds and experiences.

Education, Experience, & Skill Requirements

• Experienced gained through college degree programs and/or certification in business or technology related field, or equivalent experience.
• 7-10 years' experience with an understanding in one or more of the following: NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA , NRC.
• Demonstrate ability to be trustworthy and dependable.
• Exceptional reading comprehension and written communication skills.
• Demonstrate ability to learn quickly, be self-motivated to improve knowledge base and tackle new challenges.
• Demonstrate ability to facilitate agreement across a wide range of disparate stakeholders.
• Demonstrate a working knowledge of application development or a coding technology language such as (VBA, PowerShell, Python, Ruby, C++, etc.).
• Experience with IC devices, Generation, Transmission assets.
• Understand Human Performance Improvement principles.
• Working knowledge of agile framework and methodologies.
• Experience with Cloud security & compliance best practices.
• Professional certification a plus (e.g., CISM, CISA, CISSP, Digital Design).

Key Metrics

• % of planned work completed on time and on-budget.
• % of compliance controls completed on time.
• % of control performance effectiveness.
• % of control performance automation.

Job Family Information

Information Technology Company Vistra Corporate Services Company Locations Irving, Texas Texas

Company

We are a company of people committed to: Exceeding Customer Expectations, Great People, Teamwork, Competitive Spirit and Effective Communication.

Vistra (NYSE: VST) is a leading Fortune 500 integrated retail electricity and power generation company based in Irving, Texas, that provides essential power resources to customers, businesses, and communities from California to Maine. Vistra is the largest competitive power generator in the U.S., with a capacity of approximately 41,000 megawatts, or enough to power 20 million homes, operating in all of the major competitive wholesale markets in the country. Vistra is a leader in the energy transformation and expansion with an unyielding focus on reliability, affordability, and sustainability, powered by a diverse portfolio that includes natural gas, nuclear, coal, solar, and battery energy storage facilities. The company continues to grow its zero-carbon resources, operating the second-largest fleet of competitive nuclear power plants in the country, substantial battery energy storage capacity, and a growing number of solar facilities. Vistra is one of the largest competitive electricity providers in the country and takes an innovative, customer-centric approach to retail, offering solutions to meet customers’ needs, including more than 50 renewable energy plans. Through its family of retail brands, Vistra serves approximately 5 million residential, commercial, and industrial retail customers. As a leader in the responsible transformation of the country’s energy supply, Vistra has made significant progress towards its 2030 and 2050 targets. The company has committed to a 60% reduction of Scope 1 and 2 greenhouse gas emissions by 2030, as compared to our 2010 baseline, and net-zero carbon emissions by 2050, assuming necessary technological advancements and public policy incentives are achieved. Learn more about our environmental, social, and governance efforts and read the company’s sustainability report at https://vistracorp.com/sustainability/. Vistra’s hardworking team is committed to its purpose, “lighting up lives, powering a better way forward” and is guided by four core principles: we do business the right way, we work as a team, we compete to win, and we care about our stakeholders, including our customers, our communities where we work and live, our employees, and our investors. Learn more about how Vistra is powering a better way forward at vistracorp.com.

It is the policy of the Company to comply with all employment laws and to afford equal employment opportunity to individuals in all aspects of employment, including in selection for job opportunities, without regard to race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, disability, genetic information, military service, protected veteran status, or any other consideration protected by federal, state or local laws.

It is the policy of the Company to comply with all employment laws and to afford equal employment opportunity to individuals in all aspects of employment, including in selection for job opportunities, without regard to race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, disability, genetic information, military service, protected veteran status, or any other consideration protected by federal, state or local laws.

If you are an individual with a disability and need assistance submitting an application or would like to request an accommodation, please email us at [e-mail] to make a request.

If you are an individual with a disability and need assistance submitting an application or would like to request an accommodation, please email us at [e-mail] to make a request.