Cyber Security Analyst

Summary

The successful candidate will support the mission of providing low cost reliable power to SRP customers by participating in cyber security initiatives to protect the operation. As part of this team you will work closely with technical and non-technical personnel across SRP to evaluate and improve enterprise identity and access management. SRP utilizes a diverse portfolio of technology, and the successful candidate will be able to implement consistent account and access management solutions across a wide variety of technical and business use cases.

Successful candidate will be able to apply technical expertise and cyber security best practices to identify opportunities to reduce risk, streamline operations, and improve the user experience. Successful candidate will participate in the evaluation and implementation of new cyber security technology and procedures. Successful candidate will demonstrate the ability to provide well researched, specific, relevant and reasonable input to secure and enable new technology initiatives.

What You'll Do

• Develop, implement and operate access management technology and processes as part of an enterprise cyber security program.
• Participate in operational support and project execution, as well as internal and external assessment activities.
• Facilitate access management operations through the day to day support of the customers, partners, and systems involved in the process.
• Develop process and technology to identify access events, exceptions, or trends which require investigation, remediation or mitigation.
• Participate in occasional after-hours support activities (on call, project implementation).
• Coordinate with both internal and external auditors to assist with and respond to audit findings.

What It Takes To Succeed

Ability to:

• Understand and navigate the SRP organization in order to provide effective solutions which both secure and enable business operations.
• Analyze input from SRP's business and technical stakeholders to establish process and technical requirements for access control operations.
• Provide creative solutions leveraging input from peers, past experience, and industry research.
• Manage and effectively prioritize multiple (and often competing) assignments.
• Create and deliver effective communications to technical, business and executive stakeholders.
• Balance effective access controls with the need to maintain business operations and a positive customer service experience.

Knowledge and Skills:

Specific experience and knowledge of fundamental access control principles as they pertain to:

• Enterprise identity management tools and practices including identity, account, and access lifecycles.
• Privileged account management tools and practices.
• Account and access security controls, especially as they pertain to cloud hosted infrastructure/applications.
• Industry regulations, frameworks, and best practices related to cyber security which shape SRP's access control processes (e.g. NIST, NERC CIP, FICAM, HIPAA, PCI).
• DoD 8570 Certifications Strongly Preferred (e.g. CISSP/CISA/CISM/GSEC).

Relevant tools/concepts: Identity and Access Management tools, CASB, IGA, Privileged Account Management (PAM), IDaaS, IaaS, SaaS, MFA, Entitlement Management, Federation, SSO, SAML, OAuth, ITIL, ERP Security, Scripting, LDAP structures and support.

Experience

Promotion to level 2 requires a minimum of two years of experience at level 1; demonstrated capability to perform advanced and more difficult work as determined by the supervisor.

Promotion to senior level requires a minimum of three-years of experience at level 2; is fully competent in all aspects of functional area of assignment and as such would be recognized as a specialist in area of assignment and may have periodic or occasional lead responsibilities.

Education