Cyber Security Analyst

Summary

Ensures the confidentiality, integrity, and availability of NYPA information through the establishment of security controls, governance instruments (policies, standards) and associated processes. Provides governance and oversight to ensure that appropriate security measures are designed and architected into IT solutions and services and that vulnerabilities are identified and remediated. Monitors NYPA’s technology landscape to detect and respond to threats.

Responsibilities

• Ensure the development, implementation and refinement of security policies, procedures, and programs to protect the New York Power Authority’s Information Technology cyber assets and enterprise digital ecosystem on premise and in cloud which include computers, networks, telecommunications equipment, data centers, and firewalls.
• Assist with recommendations for IT Solutions based on business requirements; includes understanding and documenting business needs.
• Assist with threat and vulnerability management, remediation, and oversight.
• Assist with Cyber Security Awareness and Education program management.
• Assist with the configuration of and monitoring health of NYPA Cyber Security Services and Technologies. 
• Create, maintain, and manage documentation on cyber security assets, tools, and software.
• Collaborate with other IT disciplines as necessary to achieve Cyber Security outcomes.
• Collaborate with Cyber Security Incident Response team on monitoring and responding to incidents or events.

Knowledge, Skills and Abilities

• Understanding of interactions of applications, operating systems, and hardware configurations.
• Ability to understand and communicate IT security and policy planning.
• Understanding of IT industry trends and tools as they apply to providing solutions to stated business issues and opportunities.
• Knowledge of cyber security policies and practices found throughout both the public and private sectors.
• Understanding of the IT system infrastructure and network topology, familiarity with cyber security strategies and Security Information and Event Management (SIEM) tools.
• Demonstrated analytical problem-solving skills and practical cyber security experience.
• Ability to communicate technical and security related concepts to a broad range of technical and non-technical staff.

Education, Experience and Certifications

• Bachelor's Degree  
• 2 years of experience in Information Technology
• Industry Certification such as CISSP or CISM certification, or equivalent preferred.

Physical Requirements

• May be required to respond Cyber Security alerts and communicate during off hours.