Cyber Security Analyst II

The company is seeking a Cyber Security Analyst II to support its corporate cyber security program and protect cyber assets, including those within the Bulk Electric System. The role focuses on security compliance, baselines, incident response, vulnerability management, security awareness, and cyber security projects.

Responsibilities:

• Maintain and support the Cyber Security Program, protecting all corporate cyber assets
• Support the company's compliance with NERC CIP, protecting the Bulk Electric System
• Develop and maintain security baselines, procedures, and strategies to protect cyber assets while ensuring reliable system operations
• Consult with Business Units and IT on security measures during the design and implementation of on-premise and cloud/SaaS solutions
• Participate in the Cyber Incident Response process
• Aid in the development and maintenance of the Security Awareness Training program
• Manage vulnerability patches through a process lifecycle and perform vulnerability assessments on systems and services
• Support the implementation of Corporate Cyber Security capital projects

Requirements:

• Minimum 4 years of professional work experience in cyber or information security, or in another IT discipline with significant security responsibilities
• Effective communication skills, including creating and delivering presentations, briefs, and training sessions
• Ability to translate technical output from systems and assessment tools into understandable reports and action plans
• Work independently within a set of objectives, procedures, and parameters to accomplish project tasking
• Able to participate in an on-call rotation responding to out-of-hours calls and alerts in support of security response
• Ability to travel frequently to other company buildings in the Akron area, with infrequent overnight business travel required
• Bachelor's Degree in Computer Science, Information Security, or similar discipline preferred
• Relevant industry experience will be considered
• Experience in hands-on operation and administration of one or more standard IT discipline areas (Windows, Linux/Unix, Networking, etc.) in a professional setting is preferred
• Holding a security-related certification such as a CISSP, GIAC GSEC, etc., is preferred