- Serves as subject matter expert on NERC CIP standards and requirements and provides expertise on implementation of the CIP requirements through security platforms, technologies, controls, and processes.
- Performs investigations of instances of potential non-compliance with NERC CIP standards, presents recommendations to senior leaders and other stakeholders, and communicates with regulatory bodies and authorities as warranted.
- Performs cyber risk assessments on vendors, cloud services, and other external entities and makes recommendations based on cyber risk.
- Develops and supports solutions that protect NYISO data and information based on classification and NYISO data policies.
- Performs formal risk management functions including oversight of a cyber risk register.
- Establishes a controls testing program and performs ongoing oversight and governance of security controls to ensure their effectiveness, performance, and availability.
- Manages cyber risks introduced through trusted external relationships through controls, contract language, policies, and procedures that enforce good security practices with vendors and other external partners.
- Represent the NYISO to a wide range of external organizations at industry events, seminars, and conferences. Present and speak on security and compliance as appropriate. Interact with market participants, government, and other external entities on behalf of the NYISO.
- Lead the implementation of processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts.
- Bachelor's Degree (BS) in Information Security, Computer Science, Computer Information Systems, or similar fields. Master's Degree (MS, MBA) preferred.
- At least seven years of experience in progressively responsible information technology and/or IT security positions is required, along with an in-depth understanding of information security best practices, and expertise with related security technologies and tools.
- Broad and deep expertise in different information security technologies, as well as a conceptual knowledge of system development lifecycles, code and application vulnerabilities, and ability to identify solutions to challenging technical problems.
- Experience with complex IT infrastructure systems is preferred.
- Experience in the energy sector is desirable.
- High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
- Ability to respond to common inquiries or complaints from market participants, regulatory agencies or members of the business community.
- Ability to read, analyze and interpret general business periodicals, professional journals, technical procedures, and governmental regulations.
- Ability to write reports, business correspondence, and procedure manuals.
- Ability to write presentations and articles for publication that conform to prescribed style and format.
- Ability to effectively communicate security and risk-related concepts to technical and nontechnical audiences.
- Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.
- GIAC, CISA, CEH, CFE, CISSP, or similar certification preferred.
- Secret Clearance or above preferred.
- Knowledge of NIST Special Publication 800 Series is preferred.
- Ability to read, analyze and interpret general business periodicals, professional journals, technical procedures, and governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to write presentations and articles for publication that conform to prescribed style and format. Ability to effectively communicate security and risk-related concepts to technical and nontechnical
- Ability to add, subtract, multiply and divide in all units of measure, using whole numbers, common fractions and decimals. Ability to compute rate, ratio and percent and to draw and interpret bar graphs.
- Ability to define problems, collect data, establish facts and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete
- Proficient with personal computers running the Windows operating system; experience with productivity software such as Microsoft Office applications, e-mail, and Internet
-
Security Specialist
2 weeks ago
Target Colonie, United StatesTarget Central Ave [Asset Protection / Loss Prevention] As a Security Specialist at Target, you'll: Contribute to a team in the development of a secure work environment for all Target team members, temporary workers, vendors and visitors; Execute routines to identify and investig ...
-
Senior IT Security Specialist
1 week ago
New York ISO Rensselaer, United StatesJob Description · Job DescriptionThe New York Independent System Operator (NYISO) manages the efficient flow of electricity on more than 11,000 circuit-miles of high-voltage transmission lines, dispatching power from hundreds of generating units across the state. · The New York I ...
-
Security Specialist
2 weeks ago
Target Rensselaer, United StatesTarget rd Ave Ext [Asset Protection / Loss Prevention] As a Security Specialist at Target, you'll: Contribute to a team in the development of a secure work environment for all Target team members, temporary workers, vendors and visitors; Execute routines to identify and investiga ...
-
IT Security Specialist
11 hours ago
IBM Albany, United StatesIntroduction · At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are y ...
-
Security Specialist
2 weeks ago
Target Latham, United StatesTarget - 675 Troy Schenectady Rd [Asset Protection / Loss Prevention] As a Security Specialist at Target, you'll: Contribute to a team in the development of a secure work environment for all Target team members, temporary workers, vendors and visitors; Execute routines to identif ...
-
Security Specialist
6 days ago
Target Latham, United StatesStarting Hourly Rate / Salario por Hora Inicial: $18.00 USD per hour · ALL ABOUT TARGET · As a Fortune 50 company with more than 400,000 team members worldwide, Target is an iconic brand and one of America's leading retailers. · Working at Target means the opportunity to help ...
-
Information Security Specialist
16 hours ago
Staffing Solutions Organization LLC Albany, United StatesStaffing Solutions Organization LLC (SSO), an affiliate of Public Consulting Group LLC (PCG), is focused on delighting clients with world-class managed staffing and talent consulting services. SSO is committed to a diverse workforce, which is a reflection of our clients and the p ...
-
Information Security Specialist
3 weeks ago
Staffing Solutions Organization LLC Albany, United StatesStaffing Solutions Organization LLC (SSO), an affiliate of Public Consulting Group LLC (PCG), is focused on delighting clients with world-class managed staffing and talent consulting services. SSO is committed to a diverse workforce, which is a reflection of our clients and the p ...
-
Security Specialist
1 week ago
Target Albany, United StatesTarget Eastshore Hwy [Asset Protection / Loss Prevention] As a Security Specialist at Target, you'll: Contribute to a team in the development of a secure work environment for all Target team members, temporary workers, vendors and visitors; Execute routines to identify and invest ...
-
Asset Protection Security Specialist
3 days ago
The Kroger Company Albany, United StatesThe Kroger Company - JobID: 45980 [Loss Prevention / Security] As an Asset Protection Specialist at Kroger, you'll: Detect, deter and/or detain external theft suspects; Reduce customer and associate dishonesty by initiating and encouraging actions; Monitor large shrink areas in s ...
-
Security Specialist
2 weeks ago
Target Schenectady, United StatesTarget - 204 Saratoga Rd [Asset Protection / Loss Prevention] As a Security Specialist at Target, you'll: Contribute to a team in the development of a secure work environment for all Target team members, temporary workers, vendors and visitors; Execute routines to identify and in ...
-
Acquisition Specialist for Area Security"
1 week ago
Velocity Enterprises Ballston Spa, United StatesAbout the Company · We are one of the most exciting companies in the renewable energy sector. As a leading international developer, investor, and operator of large-scale photovoltaic plants, we recently became part of a highly successful global group with a 70% stake from EDP Ren ...
-
Information Security Specialist
1 week ago
Staffing Solutions Organization LLC Albany, United StatesStaffing Solutions Organization LLC (SSO), an affiliate of Public Consulting Group LLC (PCG), is focused on delighting clients with world-class managed staffing and talent consulting services. SSO is committed to a diverse workforce, which is a reflection of our clients and the p ...
-
Information Technology Services, Office of Albany, United States Full timeMinimum Qualifications Bachelor's degree* with at least 15 credit hours in cybersecurity, information assurance, or information technology. · *Substitution: bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information te ...
-
Security Specialist
4 days ago
Target Saratoga Springs, United StatesTarget Route 50 [Asset Protection / Loss Prevention] As a Security Specialist at Target, you'll: Contribute to a team in the development of a secure work environment for all Target team members, temporary workers, vendors and visitors; Execute routines to identify and investigate ...
-
Supervisory Transportation Security Specialist
1 month ago
Department Of Homeland Security Albany, United States Full timeSummary · Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public t ...
-
Healthcare and nursing assistant
1 week ago
Aurora Ventures Latham, United StatesYOUR TASKS * Care for critically ill and monitored patients * Collaboration on an equal level in an interdisciplinary, cross-professional team YOUR PROFILE * You have completed training as a health and nursing professional or a nursing specialist * Additional training in anesthes ...
-
Apex Solutions Latham, United StatesWe are looking for motivated employees for over 500 different professions. And that's all over Germany. Whether experienced professionals or career starters - we offer numerous entry and further training opportunities. · We are currently looking for you to join us in a permanent ...
-
Advanced IT Security Specialist
1 week ago
General Dynamics Mission Systems Pittsfield, United StatesBasic Qualifications · Bachelor's degree in a related specialized area or equivalent is required plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience. · CLEARANCE REQUIREMENTS:Department of Defense Secret security ...
-
Advanced IT Security Specialist
3 weeks ago
General Dynamics Mission Systems Pittsfield, United StatesBasic Qualifications · Bachelor's degree in a related specialized area or equivalent is required plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience. · CLEARANCE REQUIREMENTS: · Department of Defense Secret secur ...
Senior IT Security Specialist - Rensselaer, United States - New York ISO
Description
Job Description
Job DescriptionThe New York Independent System Operator (NYISO) manages the efficient flow of electricity on more than 11,000 circuit-miles of high-voltage transmission lines, dispatching power from hundreds of generating units across the state.
The Senior IT Security Specialist provides a wide range of information security services to protect the confidentiality, integrity, and availability of NYISO information and technical environments and to support NYISO's enterprise security goals and objectives. Responsibilities vary by function, and security operations, threat management, security incident response, security event monitoring and analysis, vulnerability management, engineering and operation of security tools and infrastructure, access, identity & account management, risk management, supply chain cyber risk management, information protection, development and maintenance of security policies, standards, and procedures, and the delivery of effective security awareness training. The Senior IT Security Specialist evaluates existing NYISO security measures, assesses the effectiveness of those measures, and recommends changes that will improve all aspects of NYISO security. The Senior IT Security Specialist is responsible for ensuring compliance with corporate and regulatory standards and plays a key role in ensuring the NYISO's compliance with cyber risk frameworks and standards.
ESSENTIAL DUTIES and RESPONSIBILITIES
QUALIFICATIONS:
ADDITIONAL REQUIREMENTS
PHYSICAL DEMANDS
While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand, walk, sit and use hands to perform routine office tasks. The employee is occasionally required to reach with hands and arms. The employee must occasionally lift and/or move up to 15 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
WORK ENVIRONMENT
The noise level in the work environment is usually moderate. Contact with staff and public will occur. Travel may be required to attend and/or conduct meetings, conferences and training. This position may require work on nights, weekends or holidays.
The NYISO takes pride in recruiting, developing and retaining highly talented individuals. In addition to competitive salaries, we offer a comprehensive benefits package and innovative reward programs.
The NYISO offers the flexibility to work both in the office and remotely, providing our employees with an enhanced work life balance. While the majority of the responsibilities of this role can be performed remotely, in most cases, employees will have periodic on-site requirements based on business needs.
All offers of employment will be made contingent upon the successful completion of a drug screening and background check.
The NYISO is an Equal Opportunity Employer and as such, does not discriminate in its hiring or employment practices.
Salary Range$99,600—$166,200 USD