Job Summary:
Northeast Power Coordinating Council (NPCC) is focused on advancing cybersecurity initiatives to protect critical energy infrastructure. The Senior Cybersecurity Analyst will lead efforts in cybersecurity best practices, risk management, and collaboration with various stakeholders to enhance security across North America.
Responsibilities:
• Develop and drive the adoption of cybersecurity best practices and standards to mature and sustain IT/OT security risk management capabilities across member organizations.
• Lead and provide technical and analytical support and coordination of the NPCC Task Force on Infrastructure Security and Technology and its associated working groups activities.
• Promote collaboration between NPCC, its members/registered entities and industry partners through organizing workshops, briefings, and training programs to enhance cybersecurity awareness, readiness and response capabilities.
• Lead and support cybersecurity outreach and risk assessment initiatives, including entity assist visits, by researching relevant threats, developing awareness and risk mitigation materials, and engaging stakeholders to enhance overall security awareness and preparedness.
• Conducting regional risk assessments, analyzing emerging threats and vulnerabilities, supporting incident response coordination, and contributing to the development of security guidelines and frameworks.
• Strengthen proactive outreach, communications, relationships, and intelligence sharing with key regulatory, law enforcement, and government agencies across Northeastern North America.
• Monitor and support the NERC Reliability and Security Technical Committee and its subgroups’ cybersecurity-related activities, as required.
• Collaborate with the ERO Enterprise, NERC, E-ISAC, and other partners to promote information sharing and risk mitigation.
• Represent NPCC in the ERO Enterprise, regional and industry security initiatives and engagements, including Grid Security Conference, GridEx and other exercises.
• Monitor and analyze cyber threat intelligence from sources such as E-ISAC, DHS Cybersecurity and Infrastructure Security Agency (CISA), InfraGard, and other local, state, federal, provincial law enforcement and governmental agencies.
• Monitor and coordinate communication on relevant critical infrastructure protection industry activities, including CISA, FERC Rulings and Notice of Proposed Rulemakings, to provide prompt notification to NPCC members of emerging issues.
• Participate on applicable ERO Enterprise collaboration groups and work closely with various program areas within NPCC and with external stakeholders (NERC, FERC, etc.) to support NPCC, ERO Enterprise and industry studies, efforts, and activities.
• Perform other duties as assigned in support of the Reliability Services Program Areas in accordance with the NPCC Long-term strategy.
Qualifications:
Required:
• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Operational Technology, or a related field (or equivalent experience)
• 5-10 years of experience in cybersecurity, infrastructure security, or critical infrastructure environments (electric utility preferred)
• Experience with IT/OT security, risk management, and/or CIP related activities
• Strong understanding of cybersecurity principles, threat landscapes, and risk management strategies
• Excellent communication, analytical, and problem-solving skills
• Proven ability to develop and deliver training and outreach programs
Preferred:
• Strong knowledge of NERC CIP standards and regulatory frameworks
• Experience in OT/Industrial Control Systems (ICS) environments
• Familiarity with cybersecurity frameworks (e.g. NIST, CIS)
• Experience with cloud environments and secure communications architecture
• Knowledge of substation networks and protocols (e.g. IEC 61850/GOOSE)
• Familiarity with Artificial Intelligence Risk Management Framework (NIST AI RMF 1.0) or equivalent
• Professional certifications such as CISSP, CISM, CISA, or SANS certifications
• Government or industry security clearance (e.g. DHS or equivalent)
Company:
Northeast Power Coordinating Council, Inc. Founded in 1966, the company is headquartered in New York, USA, with a team of 51-200 employees. The company is currently Growth Stage.