Analyst II, Information & Cyber Security
Core
Supports enterprise cybersecurity governance, risk, and compliance (GRC) programs, focusing on security controls, policy governance, and regulatory compliance.
Role type
Analyst II, Information & Cyber Security (GRC)
Builds
Enterprise security policies, controls catalogs, compliance dashboards, and audit evidence packages.
Domain
Energy infrastructure / Cybersecurity GRC
Deliverable
dashboards & analysis
Required skills
Security frameworks knowledge (NIST, ISO, CIS), control assessment, audit support, regulatory compliance, risk documentation, stakeholder communication, contract review, incident response coordination, KPI tracking.
Preferred skills
NERC CIP experience, GRC platform proficiency (ServiceNow, Archer, Smartsheet), consulting/audit background, vendor risk review, cloud security concepts.
Technologies
ServiceNow, Archer, Smartsheet, Microsoft 365, Azure
Responsibilities
Develop and maintain security policies and standards; maintain security controls catalog aligned with frameworks; perform control assessments and track remediation; develop dashboards and metrics for program maturity; support NERC CIP compliance and audits; assist in third-party risk management and vendor assessments; support incident response coordination and post-incident reviews.
Seniority
Mid-level, hands-on IC
