Senior ISO 27001/27019 Information Security Analyst

MidAmerican Energy Company; Des Moines (IA); On-site; USD 110,000 - 150,000; Full time

Job summary

MidAmerican Energy Company is seeking an Information Security Compliance Specialist to support ISO 27001/27019 controls, develop and maintain ISMS for affiliates, and coordinate internal/external audits. The role involves risk assessment, policy development, incident response, and ongoing program improvements across multiple teams and sites.

The ideal candidate has a bachelor’s degree in a related field, 8+ years in info security/audit, and relevant certifications.

Qualifications

• Bachelor’s degree in information systems, computer science, or related field; or equivalent work experience. Typically four years of related, progressive work experience if no degree.
• Willingness to travel for pre-audit inspections; travel up to 10%–25%.
• Eight years of progressively advanced technical experience in information security, accounting or audit role.
• Knowledge of information security best practices; CISM or CISSP certification.
• Deep technical knowledge of operating systems, databases, networks and disaster recovery practices.
• Excellent oral and written communication skills.
• Ability to prioritize and handle multiple enterprise-level assignments.
• Accessible after business hours to guide on-call staff in escalation situations.

Responsibilities

• Identify and implement cyber security initiatives supporting ISO 27001 and ISO 27019 controls.
• Support ISMS development and maintenance for one or more affiliate.
• Lead or support special projects, analyses, and present recommendations to management.
• Develop and implement new strategies in response to changing conditions.
• Maintain information security policies, procedures, standards, and controls.
• Coordinate with internal and external cyber security auditors.
• Execute control activities to evidence IT controls compliance.
• Lead cyber security maintenance and continuous improvement activities.
• Define third-party service levels for ISO 27001/27019 scoping.
• Advise management on enterprise information security requirements.
• Update training materials supporting security policies and procedures.
• Assess and mitigate cyber security risks and threats.
• Share best practices with BHE IT/security staff.
• Support KPI reporting and status updates for information security.
• Support business continuity planning and incident response; update incident response plans.
• Act as information security subject matter expert for the enterprise.
• Manage forensic and investigation activities.
• Perform other duties as assigned.

Skills

Information security

Risk assessment

Compliance/audit

Incident response

Communication

Education

Bachelor’s degree in information systems or computer science

CISM or CISSP certification

Job description

MidAmerican Energy Company is seeking an Information Security Compliance Specialist to support ISO 27001/27019 controls, develop and maintain ISMS for affiliates, and coordinate internal/external audits. The role involves risk assessment, policy development, incident response, and ongoing program improvements across multiple teams and sites.

The ideal candidate has a bachelor’s degree in a related field, 8+ years in info security/audit, and relevant certifications.