Cyber and Information Security Analyst - Cyber Security & TSOC

FirstEnergy is a major electric utility company headquartered in Akron, Ohio, focused on operational excellence and safety. They are seeking a Cyber and Information Security Analyst to protect their cyber assets by developing security policies, monitoring cyber risks, and educating stakeholders on cybersecurity matters.

Responsibilities:

• Act as a subject matter expert (SME) between cybersecurity and the business units in the development of appropriate policies, standards, and frameworks
• Continuously monitor trends to anticipate and plan for future impact of cyber risk on a specific business unit (BU) or function
• Follow all risk remediation protocols to ensure issues are mitigated, risks are accounted for, and exceptions are tracked in accordance with frameworks, policies and standards set by the organization
• Educate stakeholders on cybersecurity-related matters to increase awareness and improve culture
• Performs focused information risk assessments of existing or new services and technologies, along with business counterparts
• Identifies and facilitates implementation of appropriate controls to effectively manage cyber and information risks as needed
• Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services

Requirements:

• A minimum of 10 years professional-level experience and subject matter expert knowledge in at least one major cyber security discipline
• Ability to identify and assess the severity and potential impact of risks. Communicate risk assessment findings to risk owners outside the cybersecurity program in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance
• Familiarity with common cyber security related tools such as vulnerability scanners (Tenable preferred), ServiceNow IRM and GRC, Microsoft Power Automate, Microsoft Power BI, and other similar toolchains
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one's network within an organization
• An ability to effectively influence others by informing their opinions, plans or behaviors
• Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative and actionable manner
• Infrequent business travel to Akron, OH may be required
• Able to participate in an on-call rotation (cycling daily; on-call once every ~6-8 days) responding to out-of-hours calls and alerts in support of security response
• Bachelor's Degree in Computer Science, Information Security, or similar discipline