Security Analyst

Utility Services is a consulting firm that engages in compliance, security, and other regulatory functions in the electric industry across North America. Utility Services specializes in assisting registered entities with their regulatory obligations as required by the Electric Reliability Organization, as administered through the North American Electric Reliability Corporation (NERC). The Security Team is a group of Physical and Cyber Security professionals responsible for guiding our clients through the Critical Infrastructure Protections (CIP) Reliability Standards.

The job responsibilities are outlined as follows:

• Maintain a high level of understanding of NERC reliability standards for implementation with clients.
• Prepare and lead NERC compliance presentations and meetings/calls with clients.
• Prepare physical and cyber security educational awareness materials.
• Develop and maintain client program documentation.
• Develop client template program documents to comply with the latest versions of the NERC CIP Standards.
• Lead and perform regulatory assessments of client program data and documentation.
• Review network diagrams, security settings and conduct vulnerability assessments in accordance with the NERC CIP standards.
• Lead the development of scenarios for incident response tabletop exercises.
• Facilitate incident response tabletop exercises.
• Develop and approve post incident response table-top exercise reports.
• Participate in the development of new standards in the industry via committees, drafting teams, and other working groups.
• Provide support in compliance engagements with audits, to include initial drafts of audit worksheets, internal control worksheets, and auditor requests for information responses.
• Occasional support for and supervision of Associates for specific projects.
• Other tasks as needed.
• Required Travel: ~10%

Education/Experience (required):

• Bachelor’s degree, certification, or equivalent experience in computer science, cyber security, or information/operational technology.
• Experience with NERC CIP standards
• Experience with cyber security and risk assessments
• Experience with physical security practices
• High level verbal communication and technical writing skills.
• Flexibility and willingness to take on new challenges.
• Knowledge and awareness of Microsoft based software applications.
• Ability to travel anywhere in North America.

Education/Experience (preferred):

• Certified or pursuing certification in one or more of the following: ISC2 CISSP, CompTIA Security , GIAC GSEC, or other equivalent certifications
• Experience with ISO 27000, CIS Critical Security Controls, NIST frameworks, or other similar standards/frameworks

Position: Full time, non-exempt, salary

Salary Range: $70,000.00-90,000.00

Additional Benefits:

Healthcare

Dental/Vision

Hybrid Work Schedule

Paid Professional Development Opportunities

Our organization is filled with talented team members from varied professional backgrounds. It is due to this that we at Utility Services find deep value in creating a diverse and inclusive workplace. If you are interested in this role but are unsure if you meet all of the requirements, we still encourage you to apply. Our hiring team wants to ensure candidates of all identities have confidence and access to the career opportunities with USV. Apply today!

Our company hires and employs persons regardless of their race, color, religion, gender identity, pregnancy, national origin, age, disability, genetic information, sexual orientation, place of birth, or HIV Status and seeks to encourage as broad a diversity of cultures and capabilities as can be achieved. We offer a competitive compensation and benefits package including but not limited to vacation and flexible work schedules.

This is not a remote role. This role is hybrid and will require two days in the office in Waterbury, VT. Email your resume to: HR@utilitysvcs.com and we will get back to you.