Cybersecurity Analyst

Cybersecurity Analyst at a growth-oriented energy company Ideal for someone passionate about teaching, influencing, and driving change in a rapidly evolving cybersecurity environment. Opportunity to own and develop a major enterprise-wide program with visibility across all business units. Blend strategy and hands-on work , ideal for someone who enjoys both designing frameworks and executing meaningful initiatives. Join a high caliber team to enable and support the company’s objectives through security initiatives. Reporting to the Sr. Manager Cyber Security, you will work closely with IT, cybersecurity, and other business teams, offering broad exposure and strong cross-functional partnerships. Key activities include: Lead the design, implementation, and continuous improvement of NIST CSF2.0 Cybersecurity Governance framework, ensuring alignment with regulatory, industry and organizational risk management standards. Own and mature the Security Awareness and Cyber Education program, developing targeted training, behavioral change initiatives, and executive-level communications to strengthen the organization’s security posture. Develop and maintain cybersecurity playbooks and standard operating procedures (SOPs) to enhance incident response coordination, threat intelligence sharing, and collaboration across IT, Security Operations, and Business Continuity teams. Oversee EDR/MDR services, including monitoring service performance, validating detection use cases, reviewing alerts and escalations, and ensuring effective threat containment and remediation. Partner with internal SOC and external MDR providers to continuously optimize detection engineering, response workflows, and threat-hunting capabilities. Lead Threat and Vulnerability Management activities, including vulnerability assessments, risk prioritization, remediation tracking, and reporting to stakeholders. Conduct trend analysis on security events, vulnerabilities, and user behavior metrics to identify systemic risks and recommend enhancements to preventive and detective controls. Develop, track, and report cybersecurity KRIs/KPIs to measure program effectiveness, control maturity, and risk reduction. Act as a trusted advisor to IT and business stakeholders, translating complex cyber risks into actionable insights and risk-based decisions. Support internal and external audits by providing governance documentation, evidence of control effectiveness, remediation plans, and closure validation for audit findings. Contribute to short- and long-term cybersecurity strategy development, ensuring governance, detection, response, and education initiatives align with evolving threat landscapes. Note: This description is intended to give you a general overview of the position. Additional responsibilities and opportunities may be identified based on current business needs. Qualifications

To meet the basic qualifications for this role, you will have legal authorization to work permanently in the United States for any employer without requiring a visa transfer or visa sponsorship. High School Diploma or equivalent required Relevant bachelor’s degree in business or technical field preferred; An equivalent combination of education and work experience accepted Minimum of 5 years’ of IT Security and Compliance experience required Minimum of 5 years’ experience leading collaborative programs and IT security projects preferred Ability to work in-office Monday-Thursday required, with work from home option on Friday Experience managing the 24x7 third-party Security Operations Center required Hands-on experience managing and operating MDR/EDR platforms required Ability to investigate, triage, and interpret security alerts, logs, and telemetry from endpoint and supporting systems required Demonstrated experience in incident response (IR) planning, execution, and post-incident analysis required Knowledge of security methodologies, policies, standards and industry practices required

} #J-18808-Ljbffr