Cyber Security Analyst II

Computer Enterprises Inc is hiring a Cyber Security Analyst II to support the client’s Cyber Security Program with a focus on CIP-007 R2 patch management, vulnerability processes, and ongoing security readiness. This contract (W2 only) role is based in Akron, OH with a primarily remote setup plus hybrid, limited travel needs across the client’s service territory.

In this position, you will help maintain NERC CIP compliance, contribute to security baselines and procedures, and support activities that protect cyber assets while supporting reliable operations for systems tied to the Bulk Electric System. You will also participate in cyber incident response activities and support security awareness training and related initiatives.

Key Responsibilities

• Maintain and support the Cyber Security Program to help protect all corporate cyber assets.
• Monitor and support CIP-007 R2 patch management processes and the tools used to execute them.
• Support compliance with NERC CIP with emphasis on protecting the Bulk Electric System.
• Develop and maintain security baselines, procedures, and strategies with the team and stakeholders to protect cyber assets while supporting reliable and consistent system operations.
• Partner with Business Units and IT to advise on security and protection measures during the design and implementation of on-premise and cloud/SaaS solutions.
• Participate in the Cyber Incident Response process.
• Aid in the development and maintenance of the Security Awareness Training program.
• Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services.
• Support Corporate Cyber Security capital projects by helping implement devices, evaluating vendor solutions, coordinating vulnerability assessment activities, and assisting with reviews of programs, policies, procedures, and standards against cyber security best practices.
• Travel requirements may include infrequent overnight business travel across OH, PA, NJ, MD, WV, plus travel around Akron as needed.

Required Qualifications

• 4+ years of professional work experience in cyber or information security, or in another IT discipline where cyber/information security was a significant portion of responsibilities.
• Effective communication skills, including creating and delivering presentations, briefs, and training sessions.
• Ability to compose well-written professional documents and reports with minimal editorial and proofing support.
• Ability to translate technical output from systems and assessment tools into understandable reports and action plans.
• Ability to work effectively with people at varying levels across an organizational hierarchy.
• Ability to work independently within defined objectives, procedures, and parameters.
• Ability to lead ad-hoc project task teams and workgroups to accomplish tasks, resolve issues, and lead/communicate important changes.
• Ability to participate in an on-call rotation (cycling weekly), responding to out-of-hours calls and alerts to support security response, including infrequent on-site out-of-hours response.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a similar discipline (or a bachelor’s degree in another field with relevant industry experience in cyber/information security).
• Hands-on operation and administration experience in one or more standard IT areas such as Windows, Linux/Unix, or Networking.
• Security-related certification such as CISSP or GIAC GSEC (or similar).

Technologies

• CIP-007 R2
• NERC CIP
• Windows
• Linux/Unix

Pay and Contract Details

• Location: Akron, OH (hybrid/primarily remote with occasional travel)
• Pay: USD $40-$45 per hour
• Contract: W2 only, 6 month initial contract with options for extension and/or conversion

Benefits

• Optional medical
• Dental
• Vision
• 401(k) match

Education

Bachelor’s degree preferred.