Senior Cybersecurity Analyst, GRC

Job Summary

As the Senior Cybersecurity Analyst, GRC, you will be an integral member of the Governance, Risk and Compliance team within the Cybersecurity Department. 

Essential Functions

• Development of risk and compliance strategies and create, improve, and monitor company’s cybersecurity controls.  
• This role will provide high quality cybersecurity and risk management consulting to CenterPoint Energy business leaders and organizations.  
• Implement a risk-based approach when evaluating organization technology requirements including hardware and software apart of the governance review process.  
• Responsible for development of compliance activities in response to governance review process.  
• Partner with internal and external resources to gather data and develop action plans to help drive and achieve results for technology related assessment findings.  
• Develops and maintains policies, procedures, baselines, and standards working closely with other peers and managers within IT and across the business.  
• Review vendor’s cybersecurity documents such as a SIG or CAIQ questionnaire, vendor SOC2 Type II, etc. 
• Influence meaningful change within the Cybersecurity organization and beyond.  
• Manage cybersecurity projects and initiatives, including leading project plan development, stakeholder engagement, and project status updates.  
• Ensures compliance with government, company, and departmental regulations, policies, and procedures.  
• Develop Trusted Advisor relationship with business leaders, to understand business and technical risks, and to provide sound risk management guidance.  
• Identification of new or emerging risks and develop mitigation plans.  
• Provide technical leadership and security subject matter expertise around a wide range of technologies and business initiatives.  
• Driven, energetic, team player with superior oral and written communication skills.
• Superior customer service and interpersonal skills to effectively relate to employee needs; ability to build working relationships promote information-sharing.  
• Possess a high degree of originality, creativity, initiative requiring minimal supervision.  
• Working knowledge of Microsoft Office Word, PowerPoint, and Excel and performing data analysis.
   

Education Description

Bachelor's Degree in a business or a technical discipline from an accredited college or university is required. 

Experience

• A minimum of five (5) years experience in cybersecurity, security auditing, or relevant IT role working with cybersecurity concepts and tools is required.  
• Experience in data processing and analytics preferred.  CISSP, CRISC, or other relevant certifications preferred.  
• In-depth knowledge and experience in technology risk assessments and risk management preferred.  
• Demonstrated program and project management planning/execution skills.  
• Experience working with common information security standards, such as NIST Cybersecurity Framework (NIST) preferred
   

Physical Requirements

• Able to communicate either written and verbal communications either in person or through technical equipment such as telephone.
• Able to demonstrate and apply the manual dexterity to operate a personal computer and common office equipment.
• Able to sit, stand or walk for long periods of time.
• Able to exert up to 10 pounds of force occasionally, and/or a minimal amount of force frequently to lift, carry, push, pull, or otherwise move objects. 

Working Conditions

• Required to participate in CenterPoint Energy's Emergency Operation Plan (EOP).