Position Summary

The incumbent's primary role is to support portions of the District's North American Electric Reliability Corporation's (NERC) Critical Infrastructure Protection (CIP) compliance program. System supported include traditional Information Technologies (IT), Operations Technologies (OT), and Physical Access Control Systems (PACS)that support and protect the electrical grid. This will include the support of access control, logging, malware, and vulnerability scanning. The incumbent will be the customer service face of security and compliance work around PACS & OT assets.

This will require the individual to become familiar with the District’s NERC CIP program while working with personnel from the substation group, telecommunications group, power plants, corporate physical & cyber security as well as other Enterprise Technology groups.

Education, Training and Experience

Technical Analyst

Bachelor's degree in information technology (IT) or related field.

OR

Associates degree and 3 years of technical IT experience, including specific experience, as listed below.

OR

High school diploma/GED and 5 years of technical IT experience, including specific experience, as listed below.

Systems Analyst

Bachelor's degree in information technology (IT) or related field and 3 years technical IT, engineering or related experience.

OR

Associate's degree and 6 years technical IT, engineering or related experience.

OR

High school diploma/GED and 9 years technical IT, engineering or related experience.

Prior Related Experience

Ability to work independently and in cooperation with others on multiple activities, with flexibility to manage competing demands and changing priorities.

Excellent communication, interpersonal, and organizational skills.

Excellent analytical problem-solving skills.

Must be customer service oriented and adaptable to ongoing change.

Knowledge of utility operations or industrial control systems.

Licenses and/or Certifications

Security Clearance: Incumbent may be required to satisfy any existing and future District Security clearance or background check requirements for access to key District locations and/or supporting sensitive business applications.

Obtain and maintain intermediate to advanced technical certification aligned with key business system platform(s) used at the District.

Technical Analyst

GIAC Security Essentials (GSEC) or CompTIA’s Security+ (preferred to have within 2 years)

Systems Analyst

GIAC ICS Security Essentials (GICSP) or GIAC Critical Infrastructure Protection (GCIP) (preferred to have within 2 years of advancing to this level)

Essential Duties and Responsibilities

Technical Analyst

Support NPPD's OT software security patch management program including maintaining baseline configurations, regularly review vendor sites for security patches, testing of newly released software, development of implementation plans, support field installations, and review of evidence.

Initiate and process requests to change NPPD's OT cyber system configuration and provide review of changes including evidence. Follow the District's configuration management processes as they relate to Cyber Systems in scope of the NERC CIP program.

Support compliance through active development and enhancement of workflows, procedures, policies, and security solutions through collaboration with stakeholders. Follow processes and perform evidence collection through the use of workflow and database management systems.

Responsible for portions of NERC ClP compliance requirements, including record keeping, supporting NPPD's annual self-certification process, and conducting training for field personnel.

Build relations with and serve as a liaison for Transmission Engineering, Enterprise Technology, Telecommunications, Substation Maintenance, Physical Security, and Cyber Security teams and the District's Compliance Group for NERC CIP issues and, play a key support role in providing NERC CIP related audit information during the tri-annual regulator audits as well as internal District audits as directed.

Maintain awareness of latest developments in the cyber security field, including current threats in the industry, industry trends, and new technologies. Monitor new and proposed changes to compliance requirements, and industry best practices related to compliance requirements.

Essential Duties and Responsibilities

Systems Analyst

Proficient in all duties of the Technical Analyst

Provide training and modify procedures to support patch management program.

Modify procedures and policies to reflect new or additional evidence collection or to ensure reliability of systems.

Develop and streamline processes and evidence collection through the use of workflow and database management systems.

Serve as the responsible person on specific portions of the NERC ClP compliance requirements. Responsibilities will include record keeping, support for NPPD's annual self-certification process, subject matter expert during audits, and conduct training for field personnel.

Essential Duties and Responsibilities

Experience with the following is desired, however, experience with all is not a requirement:

• Industrial Control Systems
• Windows systems
• Endpoint Protection
• Logging systems (syslog management)
• Disaster recovery
• Vulnerability scanning
• Networking concepts (Routing, switching, firewalls, OSI model)
• Physical Access Control Systems
• Active Directory (account & GPO mgt)
• Scripting / automation
• Cyber risk assessments
• Virtualization
• Database administration

Accountable for other duties as assigned.

Core Competencies