Gov Risk & Comp Analyst II

Duquesne Light Company - Pittsburgh, PA

Full-time - Mid Level

Pittsburgh, PA

Utilities

About the position

The Gov Risk & Comp Analyst II position at Duquesne Light Company is focused on ensuring compliance with information security objectives within the organization. The role involves developing and maintaining IT compliance procedures, monitoring security metrics, and providing advisory services to internal stakeholders. The analyst will play a key role in managing compliance deliverables and supporting audits, while also contributing to the overall security framework of the company.

Responsibilities

• Develop, enhance and maintain information systems, platforms and IT operating compliance procedures and processes.
• Ensure timely completion of various Information Security compliance deliverables including risk assessment, remediation, and compliance efforts.
• Monitor metrics that measure the IT and Information Security Framework.
• Track and ensure adequate and timely resolutions to all audit/review issues relating to security.
• Assist with execution and tracking of the 3rd party vendor risk assessment program.
• Utilize analytical skills to assist in developing future strategies to resolve compliance issues.
• Prepare for and support compliance audits conducted by internal resources, consultants or regulatory organizations.
• Provide Information Security risk advisory and consultative services to internal customers, including IT, business, and risk and compliance stakeholders.
• Provide guidance to other operational staff, including training to new project managers and other employees in completion of compliance practices and procedures.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related discipline required.
• Two (2+) or more years of relevant experience required.
• Excellent verbal and written communication skills.
• Ability to work collaboratively within various levels of the Company and across all disciplines.
• Ability to coordinate and prioritize multiple tasks.
• Strong organizational skills.
• Strong attention to detail.
• Experience with SQL and Powershell.

Nice-to-haves

• Experience with compliance frameworks and standards.
• Familiarity with risk management practices.
• Knowledge of data governance principles.

Benefits

• Hybrid work model with a minimum of two days in the office.
• Opportunities for professional development and training.
• Inclusive workplace culture.