Note: The job is a remote job and is open to candidates in USA. FirstEnergy is a major electric utility company headquartered in Akron, Ohio, focused on operational excellence and safety. They are seeking a Cyber and Information Security Analyst to protect their cyber assets by developing security policies, monitoring cyber risks, and educating stakeholders on cybersecurity matters.
Responsibilities
- Act as a subject matter expert (SME) between cybersecurity and the business units in the development of appropriate policies, standards, and frameworks
- Continuously monitor trends to anticipate and plan for future impact of cyber risk on a specific business unit (BU) or function
- Follow all risk remediation protocols to ensure issues are mitigated, risks are accounted for, and exceptions are tracked in accordance with frameworks, policies and standards set by the organization
- Educate stakeholders on cybersecurity-related matters to increase awareness and improve culture
- Performs focused information risk assessments of existing or new services and technologies, along with business counterparts
- Identifies and facilitates implementation of appropriate controls to effectively manage cyber and information risks as needed
- Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services
Skills
- A minimum of 10 years professional-level experience and subject matter expert knowledge in at least one major cyber security discipline
- Ability to identify and assess the severity and potential impact of risks. Communicate risk assessment findings to risk owners outside the cybersecurity program in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance
- Familiarity with common cyber security related tools such as vulnerability scanners (Tenable preferred), ServiceNow IRM and GRC, Microsoft Power Automate, Microsoft Power BI, and other similar toolchains
- Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
- An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one's network within an organization
- An ability to effectively influence others by informing their opinions, plans or behaviors
- Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative and actionable manner
- Infrequent business travel to Akron, OH may be required
- Able to participate in an on-call rotation (cycling daily; on-call once every ~6-8 days) responding to out-of-hours calls and alerts in support of security response
- Bachelor's Degree in Computer Science, Information Security, or similar discipline
Benefits
- Competitive pay plus incentive compensation
- A company-sponsored pension plan
- 401(k) savings plan with matching employer contribution
- A choice of medical, prescription drug, dental, vision, and life insurance programs
- Skills development training with tuition reimbursement
Company Overview