Job Title: Operations Analyst 2 - Information Security and ComplianceJob Number: 12101Location: Vancouver, WAOnsite: 5 days per week - Alternate work schedule, such as 4 ten hour days per week, may be allowed with supervisor’s approvalOvertime: 10%
Travel: Up to 10% for meetings/trainingLength: Up to 5 years MUST be US Citizen to be eligible to apply for Federal Background Check Requires Real ID and or Valid Passport to interview SUMMARY
This contract Operations Analyst will collaborate with technical subject matter experts in Operations Technology and Control Center Communications Operations to prepare and monitor strategic compliance, cyber security, and IT/OT asset management strategies. This position will provide analytical support to the FISMA security assessments and authorizations and NERC Reliability Standard support within Transmission Services’ Control Centers and substations
POSITION RESPONSIBILITIES
- Reliability Compliance:
- Provide monitoring, review, analysis and support for the division's Security and Compliance program; assessing that compliance evidence is reliable, consistent, and useful and provide recommendations as requested. Analysis includes identifying and providing recommendations on potential impacts to Transmission programs and processes.
- Act as the primary point of contact (POC) for processes for the division's Security and Compliance program and sub-programs as assigned to include:
- Respond to phone/email incoming compliance questions based on process documented solutions available.
- Assist stakeholders with process questions and/or training as needed.
- Alert corporate manager of any noted concerns or potential issues.
- Assist in drafting solutions, processes and procedures required to achieve and sustain NERC CIP reliability compliance for the corporate Control Center and Field programs.
- Provide support for Transmission audits by providing data call response coordination, data gathering, and technical writing.
- Provide quality assurance support to help the organization adhere to established compliance standards and guidelines; alert corporate manager of any noted concerns or potential issues.
- Draft processes and procedures to support NERC Mandatory Reliability standards and DOE NIST/FISMA security controls implementation.
- Assist in development of training materials and job aids to support above.
- Assist in development of documentation necessary for reporting and audit requirements.
- Support corporate divion's staff with cyber security reviews and analysis as requested by corporate manager
- Information Quality Control and Stewardship:
- Review business processes for maintaining information quality control and quality assurance and provide gap analysis for those processes. Provide recommendations to corporate manager on alternative changes in processes and procedures to address such gaps.
- Draft, prepare, and maintain performance metrics on the quality of key business information.
- Facilitate Risk Management Framework and supporting inputs, processes, documentation, and training materials; communicate options and recommendations to SMEs and corporate management to solicit feedback and further course direction.
- Draft and prepare briefings, as requested, to staff and managers on information quality to:
- Raise awareness;
- Transfer knowledge on information quality fundamentals and/or best practices, and services.
- Data Call and Survey Coordination:
- Provide data call and industry survey support for the Transmission organization:
- Review and analyze existing documentation;
- Evaluate new or changing requirements;
- Enlist appropriate subject matter expert input;
- Draft Transmission responses for corporate manager review and approval.
- Organize, monitor, analyze, evaluate and provide recommendations on quality and performance pertaining to current data call artifacts collection and processes.
- Work with internal business stakeholders and facilitate gathering and analyzing information using standard tools and approaches and provide recommendations to include:
- Clarifying business operations and functions;
- Documenting and mapping current and future states;
- Performing gap analysis;
- Identifying and evaluating solution alternatives and providing weighted recommendations;
- Drafting associated processes and procedures for management approved direction.
Education & Corresponding Experience
- A degree in Business Administration, Management, Accounting, and Computer Science or a directly related discipline (or closely related field) is preferred.
- With an applicable bachelor’s degree, 5 years of experience is required.
- With an applicable associate’s degree, 7 years of experience is required.
- Without an applicable degree, 9 years of experience is required.
- Experience should be consistent with the specific requirements of business or operations analysis and progressively more technical in nature
Required Skills & Experience
- 5 years’ experience performing quantitative analysis.
- 1 year experience using automated data systems to include SharePoint and Visio sufficient to perform technical outputs. Technical output can include use of advanced printing such as plotters, and cross-software embedding for presentations or technical webinars
Preferred Skills & Experience
- 1 year of experience with North American Electric Reliability Corporation, Critical Infrastructure Protection (NERC CIP) regulatory standards and requirements.
- 1 year of experience with the Risk Management Framework and the 800 series of National Institute of Standards & Technology (NIST) Special Publications (in particular 800-37, 800-39, 800-53, 800-53A, and 800-115).
- 1 year of experience coordinating and maintaining NERC CIP requirements for an electrical utility or comparable public or private utility facilities.
- 1 year of technical writing and editing experience.
- Knowledge of the application of Cyber Security practices within the Federal Environment or other electrical utility or comparable public or private utility facilities.
- CISSP or equivalent.
- Information Technology Infrastructure Library (ITIL) Foundation Certification
Additional Requirements:
- Valid U.S. Driver’s License is required
- First Aid/AED/CPR Certification required within 30 days of assignment start
Pre-Employment RequirementAll employment offers are contingent upon successful completion of our pre-employment screening that may include drug testing, background/criminal check, and if applicable, must meet eligibility requirements for access to classified information.
APR Staffing is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.
About APR Staffing
APR Staffing was born from the merger of two well-respected technical staffing firms in Portland. ieSolutions and Data Resource Group. Both companies have recently been award winners for the Portland Business Journal's Fastest-Growing Private Companies. The two firms, now as APR Staffing, make for one of the fastest-growing and most-respected professional and technical staffing companies in Oregon and Southwest Washington.
Collaborating with our customers, we augment their workforce with technical and administrative professionals. We provide only high-caliber, professional-grade resources throughout the Pacific Northwest.