Senior IT Security Analyst

PSE's Security, Risk & Compliance team is looking for qualified candidates to fill an open Senior IT Security Analyst position! Specific details regarding the work arrangements for this position will be discussed in further detail during the interview process.

Puget Sound Energy's Cyber Risk Management team is looking for a strategic, experienced professional to join us as a Senior IT Security Analyst.Our Cyber Risk Management team identifies cybersecurity risks and protects PSE from potential cybersecurity threats through IT security risk assessments and contract reviews, vulnerability assessments and management, and penetration testing.

Why you should work @ PSE IT:

We are leaders in delivering technology solutions that drive IT innovation within the energy industry and create long-term value for our customers. Across our organization you'll find diverse thinkers who thrive in a culture of collaboration and teamwork while enjoying a flexible work environment that fosters creativity, commitment, and most importantly - a work-life balance.

If you're looking for a well-rounded, opportunity-rich career path, you have come to the right place. Join us and help make a difference in achieving a clean-energy future through technology and teamwork.

In this role you will:

Develop, deliver, maintain or monitor IT security policies, standards, and best practices

Performs security, vulnerability and threat assessements and security incident management.

Upholds the safety compliance standards inherent to PSE's operating and/or field procedures related to work responsibilities. Promotes a culture of total safety.

Demonstrates commitment to conduct business honestly, ethically and consistent with our core values and Code of Conduct. Ensures duties are performed in accordance with all regulatory compliance obligations

• Analyzes application security needs based on the sensitivity or proprietary nature of the data, and ensures all systems are utilized for management-approved purposes only.
• Provides technical expertise and guides the administration of security tools that control and monitor information security.
• Researches, evaluates, designs, tests, recommends, and plans implementation of new or improved information security software or devices.
• Provides expert working knowledge of the day-to-day operating environment, available tools, operating techniques, and customer applications.
• Applies security, risk or compliance fundamentals, concepts and principles in at least one process area.
• Updates processes, procedures and policies as necessary.
• Provides advice and guidance regarding the implementation of security compliance controls.
• Determines causes of security and compliance violations and recommends corrective actions to ensure data security.
• Develops work plans and manages to the project schedule.
• May act as member of IT security incident response team.
• Proficiently applies IT methods, professional knowledge and PSE standards and practices to complex tasks and situations.
• Intuitively grasps familiar, stable system performance situations.
• Responds to unfamiliar, undefined, unexpected, or unstable situations with the professionally prescribed standard response.
• Uses standard analytical tools and rules to determine root cause and resolve the broad range of common system or application problems.
• Updates or creates documentation based on work performed.
• Works with IT professionals and managers, primarily within own segment.
• Effectively relates to business partners, professional peers, and other team members.
• Works with project manager to develop realistic work estimates, financial budgets and project schedules. Reviews project deliverables for accuracy.
• Coaches less experienced IT professionals.
• Estimates resource requirements for medium-sized, straight-forward projects.
• Operates under general direction.
• Performs other duties as assigned.

• Bachelor's degree and 5 years of experience in related field, or combination of specialized training or experience and five years of directly relevant experience.
• Technical proficiency in security-related hardware and software; ability to function as a consultant to other IT groups on security matters.
• Knowledge of security controls for servers and workstations.
• Understanding of various operating environments, e.g. UNIX, Windows, Linux, Cisco IOS, AIX, Cisco UCS, VMWare.
• Knowledge of working with network routers, LAN bridges, and the communication architectures which link them together.
• Understanding of security 'firewall' gateways and their designs, configuration and management.
• Knowledge of security and internal control frameworks such as: ISO 27001, NIST 800-53, COBIT and COSO.
• Experience with implementation and management of compliance requirements such as NERC and SOX.

• Effective written and verbal communication skills are key for success in this role and you must also be passionate about mentoring and coaching junior level employees to ensure bench strength and support internal career progression.
• Ability to effectively adapt to and apply rapidly changing technology to business needs.
• Knowledge and understanding of business needs, with the ability to establish and maintain a high level of customer trust and confidence.
• Proven ability to work under stress in emergencies; flexibility to handle pressure coming from all directions at one time.
• Strong analytical and problem-solving skills.
• Strong customer focus and ability to manage client expectations.
• Highly desirable are certifications in one or more of the following:
  
  
  
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • SANS-GIAC certifications family
  • Security Plus