Sr Cyber Security Analyst -GRC

Date: Mar 12, 2024

Location: Newark, NJ, US

Company: PSEG

Requisition: 76145

PSEG Company: PSEG Services Corp.    

Salary Range: $ 101,600 – $ 160,900 

Incentive: PIP 15%   

Work Location Category: Remote Local  

PSEG operates under a Flexible Work Model where flexible work is offered when job requirements allow. In support of this model, roles have been categorized into one of four work location categories: onsite roles, hybrid roles that are a blend of onsite and remote work, remote local roles that are primarily home-based but require some level of purpose-driven in-person interaction and living within a commutable distance, and remote non-local roles that can be effectively performed remotely with the ability to work in approved states.

PSEG offers a unique experience to our more than 12,000 employees – we provide the resources and opportunities for career development that come with being a Fortune 500 company, as well as the attention, camaraderie and care for one another you might typically associate with a small business. Our focus on combatting climate change through clean energy technology, our new net zero climate vision for 2030 and enhanced commitment to diversity, equity and inclusion; and supporting the communities we serve make this a particularly exciting time to join PSEG.

Job Summary

This position is an experienced, senior level, hands-on technical lead, performing IT security functions and maintaining systems, while providing technical guidance to the team.  The GRC analyst will be responsible for leading the day to day cyber compliance, data governance, and cyber risk management functions. The role will include primary responsibility for defining, creating, and managing cyber and organizational policies and standards in support of legal and regulatory compliance needs as well as general cyber and organizational information security practices.
The analyst will lead the implementation of GRC software solutions. Collaborate with stakeholders, business analysts, process leaders, and architects in interpreting requirements and configuring them into software platform. 
 

Job Responsibilities

Responsibilities:

• Execute cybersecurity risk assessment and control attestation processes in GRC
• Lead the development and implementation of the system-wide risk management function of the information security program to ensure cyber security risks are identified and monitored.
• Lead the system-wide information security compliance program, ensuring cyber activities, processes, and procedures meet defined requirements, policies and regulations.
• Develop and implement effective and reasonable policies and practices to secure protected and sensitive data and ensure cyber security and compliance with relevant legislation and legal interpretation.
• Work with Internal and External Auditors as appropriate on required security assessments and audits
• Candidate should be able to provide GRC guidance and interpretation of rules, regulations, risks, and best practices.
• Ability to trouble shoot, identify, analyze and mitigate GRC related risks in existing processes, policies and procedures
• Review control effectiveness evidence to assess the quality and effectiveness of the implemented controls
• Work with development teams to provide appropriate and effective remediation guidance for vulnerabilities discovered during various assessments
• Document residual risk
• Prepare and communicate operational metrics and trend analysis for the Cybersecurity Leadership Team
   

Job Specific Qualifications

Required:

• Bachelor’s degree in Computer Science, Information Systems, Cyber Security, Engineering, or related discipline (i.e. STEM) and minimum of 6 years of experience in Information Security.
• In lieu of a degree, minimum of 10 years of experience in information security role.
• Knowledge of information security risk management frameworks and compliance practices.
• Knowledge of securing network technologies, client, and server operating systems.
• Ability to develop security standards and guidelines based on best practices and industry standards
• Excellent oral and written communication skills.
• Excellent leadership, technical teamwork, and interpersonal skills.
• Willing to work in strong team environment, constantly teaching and learning from other team members.
• Ability to foster working relationships with the team, IT Management and Client departments.
• Ability to explain technical concepts to the business users in the context of business requirements.
• Technical experience includes: information / data / network / computer security design, administration and/or assessment.
• Broad knowledge of information systems including Windows security, network security, systems development, communication networks, security software/hardware and operating systems.
• Leadership, planning and organizing, results orientation, technical/professional knowledge.
• Approximately 5% Travel required
• NERC CIP position, requires NERC CIP background investigation prior to start

Desired:

• Experience in Operational Technology (OT) Security is a plus
• Experience performing cyber security risk assessments
• ISC2 Certified Information Systems Security Professional (CISSP) or equivalent
• Programming Experience in Python
   

Minimum Years of Experience

6 years of experience

Education

Bachelors

Certifications

None Noted