Senior Cybersecurity Analyst

NextEra Energy - Miami Gardens, FL

Full-time - Mid Level

Miami Gardens, FL

Utilities

About the position

The Identity and Access Management (IAM) role at Florida Power & Light Company focuses on ensuring the security and compliance of user access within the organization. The position involves monitoring IAM toolsets, supporting cybersecurity assessments, and maintaining documentation for audits. The ideal candidate will contribute to the company's goal of achieving Real Zero carbon emissions by 2045 through effective cybersecurity practices.

Responsibilities

• Ensure the Identity and Access Management program adheres to modern standards and best practices.
• Ensure the user provisioning and deprovisioning processes are functional and provide guidance or support associated with network/physical access.
• Function as a qualified cyber security assessment team member and support review of items presented.
• Monitor Identity and Access Management toolsets for deviation of automated tasks or Application/Infrastructure errors.
• Provide cyber security - IAM support to all internal business units and divisions.
• Prepare documentation in support of audits and maintaining compliance for the entire organization.
• Troubleshoot or triage issues associated with user identity profiles within the Identity and Access management toolsets.
• Perform and maintain departmental Self Assessments (SAs) summary descriptions, narratives, controls and governing documents.
• Perform Cyber Vulnerability assessment (CVE) activities, including Patch assessment and Mitigation Planning.
• Participate, when assigned, in compliance-based investigations and/or audits in which evidence is requested to be gathered.

Requirements

• High School Grad / GED
• Bachelor's or Equivalent Experience
• 4+ years of experience in cybersecurity or related field
• Strong understanding of NIST Digital Identity Guidelines (SP 800-63-4)
• Knowledge of the latest standard practices for communication protocols and browser technologies
• Knowledge of CIP-04 standards and requirements tied back to authorization of access to Critical Cyber Access.

Nice-to-haves

• Certified Information Systems Auditor (CISA) certification

Benefits

• Relocation assistance if applicable
• Wide range of benefits to support employees and their eligible family members