Business Analyst 3

First Tek, Inc.

Portland, OR

JOB DETAILS
SKILLS
Accounting, Administrative Management, Adobe Captivate, Adobe Flash, Analysis Skills, Application Programming Interface (API), Auditing, Best Practices, Billing, Budgeting, Business Administration, Business Analysis, Business Model, Business Processes, Certification & Accreditation Process (C&A), Change Management, Communication Skills, Computer Networks, Computer Science, Computer Security, Conferences, Consulting, Continuous Improvement, Contract Analysis, Customer Support/Service, Detail Oriented, Documentation, Driver's License, Ergonomics, Federal Contracts, Federal Laws and Regulations, First Aid, Government, Hand Tools, Hazard Analysis, Hazardous Materials/Substances, High Voltage (HV), Homeland Security, IRC (Internet Relay Chat), Incident Response, Information/Data Security (InfoSec), Interpret Regulations, Learning Management System (LMS), Material Moving, Matrix Management, Microsoft Excel, Microsoft Office, Microsoft Office 2010, Microsoft Outlook, Microsoft PowerPoint, Microsoft Project, Microsoft SharePoint, Microsoft Word, Negotiation Skills, Network Security, On Site Support, Online Training, Operational Expenditure (OPEX), Operations Security (OPSEC), Organizational Development/Management, Organizational Skills, People Management, Performance Metrics, Performance Reviews, Policy Development, Presentation/Verbal Skills, Problem Solving Skills, Procedure Development, Process Hazard Analysis (PHA), Process Improvement, Process Modeling, Product Reviews, Program Planning, Progress Reports, Project Development, Project Evaluation, Project Execution, Project Planning, Project Tracking, Project/Program Coordination, Project/Program Management, Purchasing/Procurement, Quality Management, Regulations, Regulatory Submissions, Reimbursement, Resource Management, Risk, Risk Analysis, Risk Management, Safety Systems, Safety Training, Safety/Work Safety, Security Monitoring, Security Policy, Seminars, Staff Policies, Staff Training, Statement of Work (SOW), Status Reports, Strategic Planning, Surveillance, Team Lead/Manager, Testing, Time Management, Train-the-Trainer, United States Department of Energy (DOE), Vehicle Driving, Vendor/Supplier Selection, Work From Home, Writing Skills, eLearning
LOCATION
Portland, OR
POSTED
4 days ago
API_BA3_NNP_07202026_CORA.docx

*** | SUPPLEMENTAL LABOR MANAGEMENT OFFICE

ADDITIONAL PROCUREMENT INFORMATION (API)

Title & Level

Business Analyst 3

Work Group Location

Portland, OR

Specialty

INFOSEC Compliance and Business Process

Offsite Work Eligibility*

Routine Telework Eligible

Organization

NNP

Number of Days Onsite

3 days per Month

Hours

Full-Time, up to 40 hours

Additional Information

Assignment is approved for telework based on the approval of Personnel Security Manager.

Overtime

5% anticipated





On-Call

No





Travel

Up to 5% for local meetings and training





FN Status

NOT open to Foreign Nationals





* Current telework, remote work and onsite support is based on BPA s business needs and is subject to change or termination at any time.

** Assignments with the Remote Designation must reside in WA, OR, ID or MT. Case-by-case exceptions may apply only when in the best interest of BPA.

OVERVIEW

Assignment

This contract Business Analyst 3 assignment is located within the NNP (Personnel and Information Security, PERSEC) organization and will serve as a hands-on programmatic coordinator and auditor, supporting effective program management and project plan coordination for the INFOSEC (Information Security) program objectives and initiatives. The Business Analyst will play a key role in the development of an agency-wide Information Security and Awareness Program and subsequent implementation.

Organization

The NNP organization enacts, enables and performs work related to Personnel and Information security policy and guidance from Homeland Security Presidential Directive (HSPD) 12, Department of Energy (DOE), North American Electric Reliability Critical Infrastructure Protection (NERC CIP), Office of Personnel Management (OPM), and General Services Administration (GSA). NNP is a small but critical organization for BPA which requires personnel to be cross-trained in order to fully support the work load. NNP is a customer service organization with a unique responsibility to protect and serve our stakeholders. Our team members are independent, proactive thinkers who collaborate well. Our work ranges from detail-oriented, process-driven tasks to stressful, high priority work that requires personnel who can react appropriately and keep a calm head under pressure.


The ideal candidate will:
"Listen thoroughly to understand their stakeholder s needs, remain flexible and is able to make thoughtful decisions quickly and efficiently.
"Be able to carry out assigned tasks with a professional demeanor, as exhibited in excellent written and oral communication skills, listening skills, patience, logical and sound reasoning, and problem-solving approach.
"Have a high level of attention to detail and accuracy and be a logical thinker.
"Have the ability to work well within a highly matrixed organization.
"Have the ability to work under pressure in constantly changing and demanding environments; must demonstrate flexibility and ability to deal with ambiguity.

ASSIGNMENT RESPONSIBILITIES

Note: All official drafts, documents and recommendations, as listed below, must be reviewed, finalized and approved / accepted by appropriate BPA manager or other federal personnel with the authority to do so.

Provide highly skilled project coordination and change management services in support of Information Security initiatives.

Develop recommendations to NNP manager regarding process improvement(s) as they relate to Information Security implementation and operational excellence.

Execute to drive success on project initiatives through development of sound project plans and change management plans in the areas of stakeholder sponsorship, communication, and training and resistance management.

Develop BPA-wide information sharing tools, such as visuals, poster boards, fliers, informational handouts, etc.

Provide guidance to BPA personnel regarding security policies and procedures as needed

Develop and/or maintain BPA-wide reporting and tracking tools using SharePoint

Compile, track, and/or report status/progress data as requested for inclusion in management, program, and/or project reports; this may include providing information for Key Strategic Initiatives (KSIs).

Develop, implement and monitor effectiveness of change plans and strategies through various feedback loops or measurements and continuously improve to gain maximum benefit, mitigate risks and address identified deficiencies

Develop, maintain and improve project management/change management goals and tools to track program progress, objectives, and milestones in support of BPA wide INFOSEC implementation schedule (deliverables, templates, techniques) that are simple, effective, and designed for different audiences.

Document, test, and evaluate BPA adherence to established policies and procedures, providing feedback to applicable parties in the form of assessments/audits.

Support a sustainable infrastructure by providing adequate documentation of activities (strong evidence and compliance experience).

Cross-train other personnel and employees on INFOSEC processes and procedures as needed.

Coordinate with NNP manager on recommended improvements, changes, and course corrections.

Working with BPA manager / team lead or other federal party, follow up and coordinate BPA responses to security incidents.

Develop recommended assessment/adherence plans; obtain approval for recommended actions; execute approved plans and report results to NNP manager.

Provide expertise with business process modeling techniques to recommend new business drivers and roles and responsibilities within a project or program plan; incorporate approved recommendations as assigned.

Research the necessary information to develop training manuals and materials. Develop formats for training courses, providing recommendations on the emphasis to be placed upon each segment; obtain appropriate approvals on recommendations. Based on approved training material recommendations:

Carry out the training project or assignment (delivery) including resolving routine and/or technical problems/issues;

Validate training material aligns appropriately with BPA / INFOSEC policy;

Provide recommendations regarding the best practice training approach to be taken, including the methods and techniques to be employed; obtain BPA manager / team lead approval of recommended approach;

Train the trainers, as appropriate and/or requested.

Develop methods to evaluate trainee progress in business process-related training, as well as for continuing education. Provide developed methods for BPA manager/team lead review and approval; implement approved evaluation methods, with continuing coordination and oversight of the appropriate BPA manager / team lead.

Provide guidance and input into technical reviews of proposed projects, including recommended certification and accreditation process to be utilized.

Provide status update(s) to the BPA manager / team lead in a routine and timely manner, allowing time for review and approval and any necessary corrections that may be needed before established deadline(s).

REQUIREMENTS

Education & Corresponding Experience (required on matrix)

A degree in business administration, management, accounting, computer science or a closely-related field is preferred.

With an applicable Bachelor s Degree, 8 years of experience is required

With an applicable Associate s Degree, 10 years of experience is required

Without an applicable degree, 12 years of experience is required

Experience should include the specific requirements of business analysis and progressively more technical in nature.

Required Technical Skills & Experience (required on matrix)

Experience with the following:

Note: Candidate resume and requirements matrix must clearly explain applicable experience in sufficient detail to validate the following

requirements:

3+ years of experience effectively performing compliance and performance measurement activities in a security environment.

Direct work experience and knowledge of change management methodologies coupled with project planning and execution principles.

Experience should include a minimum of three years in one or more of the following security disciplines: Information/Operations (InfoSec/OpSec), Physical, Personnel, or Industrial.

Previous program support/project coordination experience demonstrating strong ability to interpret requirements and apply judgment to validate policies are compliant with regulations is required

Intermediate to Expert level experience with Microsoft Office Suite Software (MS Word, Excel, Outlook); (MS Office 2010 proficiency required).

Intermediate level experience with MS Project, SharePoint and PowerPoint is required. Experience should be sufficient to:

Define and track projects utilizing MS Project

Provide status and project reporting utilizing SharePoint

Develop and/or maintain BPA-wide reporting and tracking tools utilizing SharePoint

Create comprehensive, informational, and attractive presentations using PowerPoint

Experience in evaluating the adequacy and existence of security controls, preferably related to a security discipline.

Experience researching and maintaining proficiency in tools, techniques, countermeasures, and trends in information security, computer and network vulnerabilities

Ability to meet/monitor/report timelines, milestones, deliverables, and provide timely status updates on assigned tasks utilizing MS Project and other acceptable work processing tools

Experience applying change management techniques independently and, as a team member; plan, execute strategies and recommendations in the environment.

Experience performing analysis of in-place technical and non-technical information security controls protecting information in both electronic and physical form.

Preferred Skills & Experience (optional on matrix)

Training development experience using the Captivate software program.

Knowledge of principles of project management and change management

Experience with identification of sensitive and/or classified information

Additional Requirements (not required on matrix)



Valid U.S. Driver s License is required.

Must be able to obtain a Certificate of Completion in Personnel Security and Information Security training plan (See BPA required training below)

Other Assignment Considerations

May be required to work non-core hours as circumstances warrant. Saturdays and evening hours may be necessary for finishing assessments/audits and other compliance related activities, as needed.

Appendices

The following appendices apply to this assignment and may be downloaded from the Fieldglass Reference Library:



Offsite Work

Training Expectations (Worker is expected to keep current on the latest technologies and skills required for the assignment.)

Training Type

Details

Provided by



OPEx Process Mapping



BPA



OpEx Intro to Quality Management



BPA



OpEx Root Cause Analysis



BPA



OpEx Defining and Achieving the ROI of quality in service



BPA



InfoPath (or its replacement)



BPA



NERC/CIP and Site Access Training (Resolver)



BPA



Business Case 101



BPA



DOE National Training Centers on-line Learning Management System courses needed to obtain a Certificate of Completion in Personnel Security and Information Security program tracks



BPA



NERC CIP User Group Conference



BPA



NERC CIP 101 Training



BPA



Electricity Fundamentals Training - This training is held at BPA and is necessary to provide a knowledge baseline to INFOSEC staff. INFOSEC staff then can provide relevant Information, protection policies and procedures that are aligned with stakeholder s practices.





BPA

Attendance at all conferences, workshops, training, etc. must be pre-approved by SLMO. Requests will be reviewed on a case-by-case basis. Approval is subject to the most current guidance provided to SLMO by BPA or DOE and is subject to change at any time. SLMO reserves the right to negotiate attendance on billable/non-billable hours and reimbursement of travel costs with the supplier. Reimbursable travel costs must adhere to the Federal Travel Regulations and be submitted via an expense sheet in Fieldglass.

CLOSELY ASSOCIATED RESPONSIBILITIES & REQUIRED ASSOCIATED MITIGATION MEASURES

The following is a list of potential inherently governmental risk areas and the measures that SLMO-Compliance has determined must be in place, via processes and procedures, to mitigate the associated risks. The BPA manager s acceptance of the API or CWSD serves as their attestation that all applicable mitigation measures listed below are or will be established and adhered to in their organization.

Area of potential Closely Associated / Inherently Government function

Mitigation Measures

Access to Confidential / Sensitive Information

CFTE must sign NDA (Non-Disclosure Agreements) at beginning of assignments. (Does not apply to Craft assignments)

CFTE must complete annual Information Security and Privacy Awareness training.

CFTE must complete and pass background investigations of an appropriate level.

Acquisition Planning / Source Selection

CFTE are not permitted to serve as voting members for acquisition selections.

All purchasing decisions must be made by appropriate federal personnel (Contracting Officers).

All acquisition documents (requirements,
SOW s, evaluation criteria, etc.) must be reviewed, finalized and approved by appropriate BPA federal personnel.

Only Contracting Officers are authorized to obligate BPA funds.

Agency / Org Planning

All drafts, documents, materials and recommendations must be reviewed, finalized and approved by appropriate BPA federal personnel.

Budget / Finance Prep

Only Federal Employees may determine budget priorities & allocations.

BFTE must control and finalize / approve all budgets and related documentation, including that for projects, programs and Organizations.

Contract Management

All Contractual documents, including invoices must be finalized / approved by appropriate Federal personnel.

All contract-related decisions (modifications, changes, performance) must be determined by appropriate federal personnel (COs).

Decision Making

CFTE may provide input and recommendations to decision-makers.

Only appropriate federal personnel may make decisions which obligate BPA resources or to a specific course of action.

Direction & Control
(directing BFTE)

CFTE are not permitted to direct the actions of federal employees (BFTE) or have any control or input into their performance.

Work of BFTE must be assigned by federal manager, supervisor, Program / Resource manager or another appropriate designee.

Disposing Govt. Property

All decisions regarding the disposal of BPA property must be made by appropriate federal personnel; and all property dispositions must be directed and controlled by the Investment Recovery Center (IRC).

Dissemination of Agency/Policy Information / Training

All training and any information that is to be disseminated must be either 1) per established policy, process, procedure, or practice; or, 2) reviewed, finalized and approved by appropriate BPA federal personnel.

Inspection / IT Testing

Processes and procedures must ensure Federal personnel review inspection findings and CFTE recommendations before acceptance or rejection of material(s) / item(s).

HR Support

CFTE may assist with HR functions per established procedures, processes and guidelines (e.g., timekeeping).

All work products must be reviewed and finalized by appropriate federal employees.

Policy Development

BPA s process for Policy development includes multiple levels of federal review prior to acceptance / adoption.

Interpretation of Policy/Regulations

Only BPA federal employees may determine the applicability and interpretation of regulations.

CFTE are not permitted to interpret regulations for or on behalf of BPA. Regulations are interpreted by federal personnel and communicated via standards, guides, policies and processes.

Representing BPA

Contract workers are required to identify themselves and their employer in signature blocks, in introductions and have a nameplate outside their cubicle.

CFTE must receive written VP approval to represent BPA at outside events, such as workshops, seminars or conferences.



Page 4 of 4 F_0121_API_TEMPLATE_030626
CFTE NON-CRAFT HIRING SAFETY TRAINING MATRIX



CONTRACT FULL TIME EQUIVALENT (CFTE)

NON-CRAFT HIRING SAFETY TRAINING MATRIX



Purpose:

The Contract Full Time Equivalent (CFTE) Hiring Safety Training Matrix is a hazard assessment for CFTE personnel routine tasks. It is intended to set a common understanding on training requirements between the CFTE personnel and the *** (BPA) managers/supervisors. BPA Requesting Managers should complete this form and coordinate with BPA Supplemental Labor Office during the procurement process to ensure the CFTE position includes a list of required trainings associated with identified tasks, conditions, and exposures. Each task, condition, and exposure indicate which training courses are required, who shall provide those trainings, and when those trainings shall occur.

This form is intended only as a reference document for contractors.

BPA Requesting Manager

(Last, First MI)

McLaughlin,Stefhanie A.

Date

6/23/2026

CFTE Job Title

Business Analyst 3

Org

NNP

PPE provided by Supplier or Contractor?

Yes No

If yes, list required PPE: Click or tap here to enter text.



Identify which Supplier or Contractor medical surveillance programs are required, if any*

Respirator User

Asbestos

Lead

Silica

Hearing Conservation

Other: Click or tap here to enter text.

No Medical Surveillance

*BPA Requesting Managers may use equivalent Job Title Position Hazard Assessments or project Job Hazard Analyses as indicators for which medical surveillance programs may be required. Direct any questions regarding medical surveillance program requirements to the BPA Industrial Hygienist, ***, or ***.

Instructions for BPA Requesting Manager: This template has been pre-populated with tasks and hazards generally associated with CFTE non-craft positions. BPA Requesting Managers must review this document during the CFTE procurement process. The BPA Requesting Manager will:

Select the checkbox next to each task/condition/exposure that may be encountered during the normal course of the assignment.

Identify if the mitigation for applicable tasks/conditions/exposures will be provided by BPA or the Contractor (supplier).

Indicate when the mitigation must occur (pre-hire, post-hire, pre-task).

Pre-Hire Training should be completed prior to the CFTE starting their assignment.

Post-Hire training should be completed prior to exposure to a hazardous environment and/or conducting work at a BPA worksite.

Pre-Task Training should be completed prior to conducting the associated task.

Once complete, the BPA Requesting Manager will send the completed document to the Supplemental Labor Management Office.

The listed tasks, conditions, and exposures are not all inclusive. New processes, unusual tasks, or equipment may trigger the need for specialized training. Consult with your local Safety Manager or BPA Safety Training Manager for guidance.

BPA provided safety training will be the same training provided to Federal Workers.

For the General Comments section, BPA Requesting Managers can list anything that was not already covered and provide clarification to the BPA COR to better understand the CFTE position. It may include tasks, conditions, and/or exposures that are unique to a particular position, work site, or person.

For more information on the PHA process/requirement, reference the Safety and Occupational Health Manual, Safety Management Systems Chapter.

Direct any questions regarding training requirements or issues related to this form to the BPA Safety Training Manager, ***, or ***.

Office & Remote Work/Telework Hazards

Task / Condition / Exposure

Required Training

Contractor (C) or BPA (B) Provided

Pre-Hire Training

Post-Hire Training

Pre-Task Training



Exposed to a fire in the building

BPA manager will advise of evacuation protocol and designated gathering location. Annual fire drills will be conducted.

B









Exposed to an earthquake while in the building

BPA manager will advise of evacuation protocol and designated gathering location.

B









Operating office tools (paper cutter, paper punch, staplers, etc.)



None Identified

B







Task / Condition / Exposure

Required Training

Contractor (C) or BPA (B) Provided

Pre-Hire Training

Post-Hire Training

Pre-Task Training



Performing tasks that may result in repetitive motion injuries, prolonged sitting and computer use

Optional: SUFS Move Safe (HRMIS 016633)

B









Ergonomics

Recognize the hazards and know when it is appropriate to stretch and take breaks; ensure a proper desk, chair, and equipment adjusted at the appropriate level; ensure proper lighting. Any ergonomic assessment to be provided by the supplier.

B









Performing tasks that may result in slips, trips or falls such as carrying boxes and walking on stairs or slick surfaces

Review SOHM Chapter 9

B











Optional: Slips, Trips & Falls Training (HRMIS 015076)

Choose an item.









Adding electronic devices that were not previously part of the home (monitors, chargers, computing equipment, etc.)

None Identified. On-the-job familiarization (if using BPA-issued equipment).

B







Travel / Field Operation Hazards

Task / Condition / Exposure

Required Training

Contractor (C) or BPA (B) Provided

Pre-Hire Training

Post-Hire Training

Pre-Task Training



Driving vehicles on public and/or non-public roads

Review SOHM Chapter 19

Choose an item.











Defensive/Distracted Driving (HRMIS 017057)

B









Worker operates forklifts

Forklift Certification

Choose an item.









Worker operates a fire extinguisher

Fire Extinguisher Use

Choose an item.









Worker operates hand tools

None Identified

Choose an item.









Worker uses personal protective equipment

Personal Protective Equipment

Choose an item.









Worker may be exposed to shock and arc-flash hazard

Shock & Arc Flash Awareness

Choose an item.











Shock & Arc Flash Basic

Choose an item.











Shock & Arc Flash Advanced / Refresher

Choose an item.









Worker may contact but will not disturb Asbestos Containing Material (ACM) or Potentially Asbestos Containing Material (PACM) 2

Asbestos Awareness

Choose an item.









Worker required to work in remote areas where bear encounters may take place

Bear Pepper Spray Training

Choose an item.









Worker exposed to rodent and bird droppings1

Biological/Vermin/Hanta Virus

Choose an item.









Worker exposed to hot and/or cold environments





None Identified

Choose an item.







Task / Condition / Exposure

Required Training

Contractor (C) or BPA (B) Provided

Pre-Hire Training

Post-Hire Training

Pre-Task Training



Worker exposed to chemicals, such as herbicides or pesticides;

Herbicide Cert. Ref. 4-hr

Choose an item.











Herb Certification 8-hr

Choose an item.











Hazardous Communication

Choose an item.









Worker exposed to lead2

Lead Awareness

Choose an item.











Lead Worker Training

Choose an item.









Worker exposed to mercury

None Identified

Choose an item.









Worker exposed to noise2

Hearing Conservation (Initial)

Hearing Conservation (Annual)

Choose an item.









Worker exposed to silica2

Silica - Awareness

Choose an item.









Worker works at heights higher than 4

Fall Protection, Awareness

Choose an item.











Fall Protection, General

Choose an item.











Fall Protection, Advanced

Choose an item.











Ladder Safety

Choose an item.











Fall Protection, Advanced (TLM)

Choose an item.









Worker is required to take first aid and may be called on to render first aid for: workers on high voltage lines and/or equipment; worker works in remote areas

First Aid/CPR/AED

(Red Cross or AHA Accredited)



Required only if specified in the API

Choose an item.









Worker performs work alone in remote areas

Wilderness Adv. First Aid

Choose an item.









Worker may prepare, transport or receive hazardous materials

DOT 1: Introduction, Classification, and the Hazardous Materials Table

DOT 2: Packaging, Labeling, Marking, and Placarding

DOT 3: Shipping Papers

DOT 4: Loading and Storage

DOT: Security for Shipment of Hazardous Materials

Hazardous Materials: Shipping Lithium Batteries under DOT Exemptions

DOT Hazardous Material Awareness for the General Hazmat Employee









Choose an item.







1 BPA workplace manager to review Hantavirus Prevention Procedure 420-240-1 before performing task.

2 These exposures may require enrollment in a Medical Surveillance Program. Ensure page 1 is marked accordingly.

Other Specific Hazards

Task / Condition / Exposure

Required Training

Contractor (C) or BPA (B) Provided

Pre-Hire Training

Post-Hire Training

Pre-Task Training



SAMPLE: Worker may make infrequent visits to field locations or substations

Worker complete the PPE assessment in the SOHM to determine need for PPE such as hard hat, safety glasses, hearing protection, safety vests, Arc Flash clothing or steel-toed boots.

B



X





Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.









Click or tap here to enter text.

Click or tap here to enter text.

Choose an item.







General Comments

BPA Requesting Manager Comments/Additional Considerations:

Click or tap here to enter text.



F_0139_HIRING_SAFETY_TRAINING_MATRIX_121624

About the Company

F

First Tek, Inc.