Cyber Security Analyst II

Allete - Duluth, MN

Full-time

Duluth, MN

Utilities

About the position

The Cyber Security Analyst II position at Minnesota Power focuses on enhancing and maintaining the NERC CIP-004 program while ensuring the security of information systems and data. The role involves collaboration with various stakeholders, performing security evaluations, and implementing necessary changes to improve security protocols. The analyst will also provide security awareness training and support compliance efforts with regulatory standards.

Responsibilities

• Improve and maintain Minnesota Power's NERC CIP-004 program in collaboration with other Standard Owners and Subject Matter Experts.
• Perform moderately complex tasks related to the security of information systems and data under moderate direction.
• Evaluate, recommend, monitor, and maintain standards, guidelines and procedures used to protect information systems, data and minimize security risks.
• Solve a range of problems by identifying potential threats and responding to reported security violations.
• Research, recommend, and implement changes to procedures and systems to enhance information systems security.
• Provide security awareness training for users.
• Support Information Technology compliance efforts to ensure all regulatory standards are adhered to.
• Perform research and stay abreast on emerging issues and technologies.
• Continuously build knowledge of the organizations, processes and customers while developing proficiency and skills within discipline.

Requirements

• Bachelor's degree required, preferably in Computer Science, Management Information Systems, Business Administration, Accounting or Communications.
• Four years or more job-related experience required, preferably in security or computer system analysis and/or technical support of computer information systems.
• Certification in CISSP or CISA is preferred.
• Previous project management and technical writing experience is preferred.

Nice-to-haves

• Experience with NERC CIP Standards, preferably with NERC CIP-004.