Analyst - Compliance

Position Information

Job Title: Analyst - Compliance

Location: Orange, CT

Salary Range: $84,400 - $105,500

Schedule: On Site, Office, 5 days

Job Summary

This position provides operational support across the Avangrid Networks business to support the execution of the information security roadmap while ensuring a secure and stable production system environment. This position will support the efforts to balance real world risks with business drivers such as reliability, speed, agility, flexibility, and performance. The role assures maintenance, support, and system monitoring of infrastructure assets across Avangrid Networks.

Key Responsibilities

· Support the Manager of Cyber Operations to assure a stable and secure production environment for Avangrid Networks.

· Evaluate monthly operating system patches for applicability and advising/assuring that patches are deployed by the Infrastructure team.

· Review vulnerability scans and work with application subject matter experts and the Infrastructure team to remediate identified security vulnerabilities.

· Work with application subject matter experts to assure the periodic evaluation of system patches and upgrades are completed.

· Work with team to assure newly deployed network infrastructure, server operating system, application systems are implemented in compliance with documented policies and procedures including system hardening and baseline scanning.

· Define and compile data and metrics to provide reportable information to communicate the status of patching, vulnerability remediation, system monitoring, etc.

· Work with application subject matter experts and Infrastructure team to assure the system monitoring of infrastructure assets across Avangrid Networks.

· Develop and maintain system monitoring alert run books to provide first level response and escalation procedures.

· Coordinate technical design/review activities with various segments and corporate groups; to engage Cybersecurity, Risk & Governance, Enterprise Architecture and Operational Compliance at appropriate stages in the project.

· Continuous process improvement activities as required to align with corporate policies.

· Complete assigned duties/task as needed.

· Understanding and ability to execute/manage Cyber Vulnerability Assessments

Required Qualifications

Education and Experience Required:

· Master’s Degree in Engineering, Computer Science, or technical related degree with a minimum of 1+ years’ of related equivalent work experience or

· Bachelor’s Degree in Engineering, Computer Science, or technical related degree with a minimum of 3+ years’ of related equivalent work experience or

· Or 5+ years’ related equivalent work experience or equivalent experience within Gas/Electric Utility business.

· Working knowledge of networks and networking equipment.

· Working knowledge of operating systems and server applications.

· Working knowledge of virtual environments (VMware & Others).

Skills/ Abilities:

· Strong communication and administration skills related to technology, both IT and OT.

· Strong understanding of system engineering and integration background for advanced systems and networking technologies.

· Strong understanding of current and future state of cyberspace. Understanding with strong desire to learn.

· Intermediate to advanced expertise in MS Excel to correlate data and produce reports.

Preferred Qualifications

· Experience in a utility environment

· Experience with NERC-CIP, NIST CSF, MITRE ATT&CK, and CIS Benchmarks

· Experience participating in regulatory audits

· Certified Information Systems Security Professional (CISSP)

· Project Management

· Change Management

· Incident / Issue Management

· Interpersonal Skills

· Communications / Influencing

· Negotiation / Dispute Resolution

· Ability to develop self and learn new information quickly

Competencies

· Growth & Continuous Improvement

· Initiative & Change

· Focused on Results

· Customer Centric (internal and/or External)

· Communication

· Collaboration

· Leadership (people managers/leaders)

What We Offer:

• Competitive benefits and growth opportunities
• Generous performance-based bonuses
• 12% 401(k) match
• Comprehensive health, dental, and vision insurance
• Tuition reimbursement
• Professional development and clear career-advancement pathways

For more information, please visit:Benefits - Avangrid

#LI-Onsite; #LI-CH1

Company:

Mobility Information

Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.

At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.

If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at [email protected].

Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. This does not include those that will work for Avangrid Power.

Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.

Job Posting End Date: