Lead Analyst, Cyber Security Compliance
On-siteIrving, Texas, United States
Job Summary
Maintain extensive knowledge of Vistra Compliance regulations and develop, implement, and maintain program procedures, processes, and tools. Lead the development of interpretations of Standards and guidance documents to produce unambiguous descriptions of compliance obligations for internal stakeholders and summarize impact for executives. Administer the proprietary internal control system, ensure required documentation is accurate and effective, and facilitate internal and external audit activities. Investigate variances, perform root cause analysis in instances of non-compliance, and design corrective action plans. Accurately interpret regulations to design processes that inherently result in compliance behavior while supporting technology key controls and regulatory requirements such as NERC-CIP and ERCOT. Identify opportunities for efficiency and automation within compliance controls and support metrics processes that track control performance effectiveness.
Required Qualifications
- Experienced gained through college degree programs and/or certification in business or technology related field, or equivalent experience
- 7-10 years' experience with an understanding in one or more of the following: NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA, NRC
- Demonstrate ability to be trustworthy and dependable
- Exceptional reading comprehension and written communication skills
- Demonstrate ability to learn quickly, be self-motivated to improve knowledge base and tackle new challenges
- Demonstrate ability to facilitate agreement across a wide range of disparate stakeholders
- Demonstrate a working knowledge of application development or a coding technology language such as (VBA, PowerShell, Python, Ruby, C++, etc.)
Desired Qualifications
- Experience with ICS devices, Generation, Transmission assets
- Understand Human Performance Improvement principles
- Working knowledge of agile framework and methodologies
- Experience with Cloud security & compliance best practices
- Professional certification a plus (e.g., CISM, CISA, CISSP, Digital Design)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.