Cybersecurity Analyst

$118,435 - $177,674/Yr

City of Seattle - Seattle, WA

Full-time - Mid Level

Remote - Seattle, WA

1,001-5,000 employees

Executive, Legislative, and Other General Government Support

About the position

Seattle Public Utilities (SPU) is seeking a dedicated and skilled Cybersecurity Analyst (IT Professional A, Exempt) to join our team. This crucial role is responsible for identifying, classifying, and prioritizing cybersecurity vulnerabilities, risks, and mitigation plans to protect SPU's infrastructure and services. As the Cybersecurity Analyst, you will contribute to maintaining and updating SPU's Cybersecurity Risk Management Plan, ensuring alignment with business needs and coordination with the City's cybersecurity objectives. As a key member of our cybersecurity team, you will play a vital role in developing strategic initiatives and policies to create and maintain a secure, efficient, and resilient technology environment. This position involves close collaboration with the SPU Cybersecurity Manager, leadership, and both internal and external stakeholders to prioritize cybersecurity efforts, develop actionable roadmaps, and oversee the implementation of critical projects. The Cybersecurity Analyst will focus on and support SPU major cybersecurity initiatives, including the Utility Cyber Response Program, Utility Cyber Governance Program, and Utility Cyber Risk Management Program. These programs are essential for safeguarding our operational technology (OT) systems, ensuring business continuity, and protecting the public by securing the systems that deliver our essential services. If you are passionate about cybersecurity and eager to contribute to the protection of critical infrastructure that serves the residents of the City of Seattle and beyond, you're invited to apply today!

Responsibilities

• Develop and maintain the utility's Cybersecurity governance processes, policies, and standards of practice, in coordination with Seattle Public Utilities and Seattle IT stakeholders.
• Maintain the risk framework, develop metrics, monitor, and report on risks, maturity, and progress of the Cybersecurity program to identify high priority goals and support roadmap development.
• Conduct and support third-party cyber risk assessments, including OT/SCADA environments and IT/OT convergence areas.
• Assess and provide subject-matter expertise and guidance on cybersecurity risk for OT projects and change requests.
• Develop policies, guidelines, and standards to ensure the safety, reliability, availability, confidentiality, and integrity of operational technologies, including SCADA systems.
• Actively team with operational technology staff to identify malware or malicious activity and investigate/troubleshoot issues for root cause remediation.
• Lead incident response activities to minimize risk of compromised systems while ensuring continued utility operations.
• Work with Seattle IT Digital Security and Risk and Seattle City Light Cybersecurity teams to develop cross-department incident management protocols and respond to incidents impacting SPU IT/OT environments.
• Prepare and deliver cybersecurity communications including reports to both technical and non-technical audiences, contributing to Cybersecurity training and awareness activities for staff.

Requirements

• Five (5) years of progressively responsible experience in IT/OT Cybersecurity management and operations, regulatory compliance, policy, and program development.
• Experience successfully leading large, complex projects in business/IT consulting/management roles.
• Strong understanding of technology trends, risks, and Cybersecurity best practices, utility operational and information technologies.
• Advanced technology skills and expertise in incident response and threat intelligence, network security and firewalls, identity and access management, penetration testing, and vulnerability assessment.
• Ability to lead in a cross-functional environment and develop professional relationships with diverse stakeholders.
• Strong oral and written communication skills with the ability to convey technical information to non-technical staff or customers.
• Proven ability to proactively solve problems and recommend solutions.
• Strong analytical and critical thinking skills.
• Possession of industry-recognized certifications such as CISSP, CISM, or CISA is preferred.

Nice-to-haves

• Understanding of Utility Operational and Information Technologies
• Ability to balance competing priorities and deliver results within resource-constrained environments.

Benefits

• Disability insurance
• Health insurance
• Dental insurance
• Vision insurance
• Work from home opportunities
• Generous benefits package
• Free Orca Pass
• City pension plan with employer/employee contributions
• Growth potential and advancement opportunities