Operations Analyst 3

ACS Professional Staffing; Vancouver (WA); On-site; USD 68,000 - 98,000; Full time

Benefits offered by this job

Paid holidays 11 days

PTO 10 days

Sick leave 56 hours/yr

EAP

Medical benefits

Dental benefits

Vision benefits

HSA

401k with 4% match

Calm App

Life/AD&D

LifeBalance discounts

Job summary

ACS Professional Staffing is seeking a contract cybersecurity/compliance specialist in Vancouver, Washington. The role focuses on Reliability Compliance, vulnerability management, and regulatory alignment with NERC/FISMA standards.

You will draft, review, and improve documentation, coordinate with SMEs, and support audits and data calls. Ideal candidates hold relevant degrees and 8–12 years of experience in operations analysis with strong Excel/SharePoint skills.

Qualifications

• Bachelor’s degree preferred with 8+ years experience in related field.
• Associate’s degree with 10+ years experience in related field.
• Strong cybersecurity and regulatory compliance background required.

Responsibilities

• Monitor and support Vulnerability Management Program compliance.
• Provide recommendations to mitigate and review for NERC/WECC rules.
• Draft and review documentation and procedures to support compliance.
• Support audit responses and data calls with management.
• Engage subject matter experts for cyber security assessments.
• Develop training materials to support compliance tasks.
• Assist with reporting and governance artifacts for regulatory requirements.

Skills

Cybersecurity knowledge

Compliance

NERC/FISMA knowledge

Data reporting

Education

Bachelor's degree preferred

Associate's degree required

Job description

Location and Type

Location: Vancouver, Washington Type: Contract Job #8869

Compensation

Pay Rate: $49.57 - $70.82

Benefits

• Paid holidays: 11


• PTO: Starting at 10 days


• Sick Leave: Up to 56 hours per year (prorated based on start date)


• EAP: Employee Assistance Program


• Benefit Options Available: Medical, Dental, Vision, FSA, DCA, LPFSA, HSA, Group Life/AD&D, Voluntary Life/AD&D, Voluntary Short-Term Disability, Voluntary Long-Term Disability, Voluntary Critical Illness, Voluntary Accident, Hospital Indemnity, 401k (immediately eligible for employee and employer contributions - employer match up to 4%)


• Other benefits include the following: Calm App, LifeBalance Discount Program

Responsibilities

Reliability Compliance Provide monitoring, review, analysis and support for the Vulnerability Management Program - verifying compliance evidence is collected in a timely manner and that information is reliable, consistent, and useful; providing recommendations for improvement as necessary. Serve as a process point of contact for the organization. Provide recommendations to management to mitigate, comment on, or provide further review for NERC and WECC proposed rulemaking and policies. Utilize J-OT's library publishing process to verify documentation is up-to-date and of adequate quality; performs data tracking. Provide recommendations for changing/enhancing organization and information navigation in J-OT's library structure. Identify and engage subject matter experts regarding programmatic cybersecurity, compliance, for completions of assessments for completion set by current timetables for regulatory compliance. At the direction of Management, draft and recommend processes and procedures to support NERC Mandatory Reliability standards and DOE NIST/FISMA security requirements for review and approval by management. Final documents will be reviewed and approved by staff. Assist in development of training materials and job aids to support above Support the development of documentation necessary for reporting and audit requirements. With oversight of the manager/staff, provide quality assurance support to verify that vetted and established compliance standards and guidelines are followed; alert manager of any noted concerns or potential issues. Provide support to NERC annual certification process and any other spot audit or compliance requests. Support the development of documentation necessary for reporting and audit requirements. Draft and recommend procedures to accomplish reliability compliance tasks for the Control Center program for review and approval by management. Assist managers with the promotion and implementation of approved recommendations and/or adopted procedures. Provide support to management / staff in the Control Center audits by providing technical expertise, data call response coordination and data gathering. All materials related to audit responses must be reviewed by management / staff. Participate as a technical member of the team performing cyber security reviews and analysis. With oversight of the manager staff, work with the team to develop and recommend cyber strategies and action plans to improve the team's cyber security maturity. Provide expert-level insight on cyber security best practices and architecture for data center operations. Review process and procedure documentation to identify gaps and potential improvement areas. Develop reports, graphs and other informational materials to present and support improvement recommendations for management review and approval. Provide program support to the Performance Analysis manager, including: Technical writing and coordination: Draft initial System Security Plans (SSP)s and work with resource managers to finalize SSP for Authorization to Operate (ATO) certification. Validate that Plan(s) of Action and Milestones are linked to asset strategies. All drafted materials must be reviewed and finalized by management / staff. Time management: Provide primary monitoring of key POAM milestone efforts and mitigation efforts dealing with compliance. Verify that these efforts contribute to the asset strategies. Report on performance and accomplishments: Monitor Technical Feasibility Exceptions (TFE) and verify TFEs are updated and retired in a timely manner. Data Call and Survey Coordination Provide direct support for data calls and industry surveys. This may entail review and analysis of existing documentation and any new/changing requirements, enlistment of appropriate subject matter expert input, and drafting of Control Center responses. All drafted materials related to responses must be reviewed and edited by management / staff. Organize, monitor, analyze, and report on performance / metrics pertaining to data call artifacts collection and processes. Maintain and update process artifacts, verifying they are up-to-date and of adequate quality (reliable, consistent, and useful). Control Center Cyber Vulnerability Management Program Support Define, identify, and classify the security holes (vulnerabilities) in a computer, network, or communications infrastructure. Interact with business units to discover, triage and resolve security vulnerabilities and/or patch implementation with manual and automated tools to enforce security criteria as part of a Secure Development Life Cycle on a continuous basis. Conduct vulnerability assessments (application, OS and/or infrastructure Hardware such as physical servers and routers, switches, firewalls, etc) and articulate security issues to technical and non-technical audience. Conduct vulnerability assessments using output from tools such as; NMAP, Nessus, Splunk, SolarWinds or other related tools Compile vulnerability and/or Patch information data from many sources and track technical resolution and mitigation times, to include POAM's, development and tracking with other organizations within the company. Provide support for Patch Program implementation, documentation and support for FISMA/NERC-CIP compliance requirements. Provide support for Discovery, Identification and evaluation, as well as governance of testing, implementation, and verification of security related patches. Provide support for evidence and reporting necessary to demonstrate compliance within regulatory laws, standards, and requirements (i.e. FISMA and NERC-CIP). Report findings and maintain on-going assessments for regulatory reporting. Alert manager and generate system vulnerability and Patch reports; interface and collaborate with internal groups to identify, discuss and develop remediation recommendations. Present recommended remediation plans for management / stakeholder review and approval. Track and follow through to completion assigned remediation activities; may need to seek manager guidance with prioritization questions or concerns. Assist with vulnerability assessments including evaluation of specific configurations of network devices, operating systems, and network enabled software applications on both Windows and Linux platforms Perform network discovery and comparison with known cyber assets.

Requirements

A degree in Business Administration, Management, Organizational Development, Accounting, Engineering, Computer Science or a directly-related discipline is preferred. With an applicable Associate's degree, 10 years of experience is required. With an applicable Bachelor's degree, 8 years of experience is required. Without an applicable degree, 12 years of experience is required. Experience should be consistent with the specific requirements of operations analysis and progressively more technical in nature. Intermediate level proficiency in MS Excel 2016 sufficient to provide dashboard metrics in a variety of formats including charts and graphs using macros and pivot tables. Proficiency in automated data systems to include SharePoint and Visio and a high degree of efficiency in technical dynamics of software output (e.g. use of advanced printing such as to plotters, capabilities of cross-software embedding for purposes of presentations, technical webinars, etc.). Knowledge of patching programs of major hardware/software manufacturers. Knowledge of secure configuration and hardening of systems. Knowledge of methods for on-going evaluation of the effectiveness and applicability of information security controls (e.g., vulnerability testing, and assessment tools). Experience with the following: IT Monitoring/Reporting tools (i.e. SNMP, Tripwire, Nessus, NMAP, Splunk, SolarWinds, etc.); Trouble ticket/change request tools and processes, IT asset, and/or configuration management suites; 2 years of experience implementing and adhering to FISMA standards, knowledge of the application of Cyber Security practices within the Federal Environment. 2 years of experience implementing and adhering to NERC-CIP regulatory standards of compliance and documentation. Valid U.S. Driver's License is required. Work sponsorship is not available at this time. Third-party candidates will not be considered for this position. Because we are a federal government contractor, we have special restrictions placed on us for hiring foreign nationals into certain key positions within the company. This particular position requires U.S. citizenship. ACS Professional Staffing will provide equal employment opportunities to all applicants without regard to the applicant's race, color, religion, sex, gender, genetic information, national origin, age, veteran status, disability status, or any other status protected by federal or state law. The company will provide reasonable accommodations to allow an applicant to participate in the hiring process if so requested.