CYBERSECURITY SPECIALIST

JOB TITLE: CYBERSECURITY SPECIALIST

LOCATION: BANGOR

REPORTS TO: MANAGER, NERC COMPLIANCE

POSITION STATUS: EXEMPT, NON-BARGAINING UNIT, FULL-TIME

Be a part of the team that is transforming the power industry of northern and eastern Maine.

Versant Power is building on our 100-year history of delivering efficient, safe and reliable electricity service to customers in northern and eastern Maine. We never lose sight of safety, quality, integrity and innovation.

We are committed to our dedicated people, who inspire us every day to deliver something more powerful than power alone.

POSITION OVERVIEW:

Under the general direction of the Manager, NERC Compliance, the Cybersecurity Specialist will provide support to the cybersecurity and compliance needs of the organization in accordance with the North American Energy Reliability Corporation (NERC) standards. Lead and assist with the development, implementation and maintenance of policies and procedures, cybersecurity systems, training supplementation, evidence collection, and program requirements to comply with all regulatory standards including those imposed by NERC to ensure the reliability and security of the electric grid.

ESSENTIAL FUNCTIONS:

• Provide subject matter expertise on NERC Critical Infrastructure Protection (CIP) standards with particular focus on standards CIP-005 Electronic Security Perimeter, CIP-007 System Security Management, CIP-012 Communications Between Control Centers, and CIP-015 Internal Network Security Monitoring
• Collaborate with Corporate Cyber Security, Operational Technology (OT), and Information Technology (IT) teams to vet the development, implementation, and monitoring of cyber security systems protecting the Bulk Electric System (BES)
• Assist Cyber Security team with development of cyber security policies and procedures as an advocate for NERC Compliance
• Evaluate technical evidence, their sources, and procedures for collection in support of the NERC compliance program
• Ensure the development and testing of disaster recovery plans for NERC CIP assets
• Assess project plans for technical components impacting CIP assets and/or labor performed within CIP areas
• Analyze network diagrams, port configurations, and service maps for risk and compliance
• Works collaboratively with various NERC subject matter experts to support development of procedures and processes which align with NERC standards in relation to cyber security.
• Assist with development of cyber security awareness program
• Provides support for internal and external audits as they arise
• Participates in regulatory compliance planning sessions, tabletop exercises, and audit preparation meetings.

ADDITIONAL RESPONSIBILITIES:

• Other related duties as assigned, including designated duties associated with Storm Restoration.

REQUIRED OR PREFERRED EDUCATION, CERTIFICATIONS, EXPERIENCE, KNOWLEDGE, SKILLS, AND ABILITIES:

Tier I

• Associate degree in information technology or electrical engineering or educational equivalents such as certifications or experience working in information technology, cyber security, corporate compliance, operational technology, or other technical position within electric utility.
• Strong attention to detail with focus on thorough inspection practices and comprehensive documentation.
• Understanding of computer networking technologies or Supervisory Control and Data Acquisition systems.
• A functional collaborator willing to assume a support role or provide leadership as needed.
• Ability to communicate professionally and effectively with staff, vendors, law enforcement, emergency services, and the general public.

Tier II

• Meet all criteria listed for Tier I.
• Three or more years of experience working in information technology, cyber security, corporate compliance, operational technology, or other technical position within electric utility.
• Certification in related subject matters such as CompTIA Security+, CompTIA Network+, Cisco Certified Network Associate, CISSP, CISM, or ITIL preferred or ability to acquire certification within six months of hire or promotion.
• Experience with network management and advanced network technologies required.

Tier III

• Meet all criteria listed for Tier I and II.
• Five years or more of experience working in information technology, cyber security, corporate compliance, operational technology, or other technical position within electric utility.
• Certification in related subject matter required.
• Demonstrated knowledge of industry standards and frameworks, such as NERC CIP, ISO/IEC 27001, NIST, or SOC 2 type 2.
• Project management or project technical lead experience required.

NOTES:

• Position is primarily stationary, with some walking, standing, and driving required
• Position may require irregular hours

RATE OF PAY:

Salary Level is commensurate with experience and qualifications.

APPLICATION INFORMATION:

Non-Bargaining Unit, Regular and Term employees who have at least six (6) months satisfactory job performance and attendance records in their current job are eligible to apply for posted positions.

This job description is subject to change at any time.

Versant Power is a drug-free, tobacco-free and fragrance-free workplace.

Versant Power is an equal opportunity employer.

Posted: 11/4/2026