IT Cyber Security - 657502HW  

1. Manage access control program for physical and logical access to critical cyber assets, as well as access to critical cyber asset information: (20%)
a. Maintain list of personnel authorized for access and respective access privileges. Coordinate verification of “need to know” privileges with CIP Program Manager, business unit managers, and restricted area owners.
b. Coordinate quarterly review of all personnel and their access rights
2. Review all CIP security changes with EMS Group, Substation Maintenance Engineering, Transmission, and Energy Supply, including review of on weekly basis: (20%)
a. Ports and Services control processes and systems
b. Security Patch management processes and systems
c. Malicious software prevention processes and systems
d. Account management processes and systems
e. Security status monitoring processes and systems
f. Disposal or redeployment processes and systems

3. Review processes and logs for electronic access control to critical asset electronic security perimeters (ESPs) in control centers, substations, and generating plants, including coordination and review of: (20%)
a. Access request and authorization procedures
b. Authentication methods
c. Dial-up security
a. Network or controls modifications within 90 days of change
b. Electronic access logs every 90 days

4. Maintain and Validate critical cyber asset lists (20%)
a. Coordinate change control processes for adding, removing, or modifying assets with EMS Group, Business Systems IT Support, Transmission Engineering, and Energy Supply
b. Coordinate internal reviews of list to ensure accuracy and completeness.

5. Review and process all exceptions to Cyber Security Policy, including: (20%)
a. Management review and approval
b. Analysis of risk
c. Implementation of compensating measures
d. Reporting of exceptions to regional reliability organizations

• Experience in utilities industry with control systems operation and security (3 years)
• Expertise and experience with cyber security and IT security audits (5 years)
• Expertise and experience with IT security vulnerability assessments and penetration testing (2 years)
• Knowledge of and experience applying NIST 800-53 and associated framework of IT security controls
• Experience with NERC reliability standards and compliance activities
• Certifications preferred: CISSP, CISA
• Excellent verbal, written, and presentation skills and ability to interact with senior management

BS Computer Science or Computer Engineering, Information Systems Security Certification desired

Skill/Role Level Years Preference
Security Monitoring/Auditing Intermediate 5.0 Required
Security Administrator Intermediate 5.0 Required
Account Management Intermediate 5.0 Required
Utilities
NextGen Information Services, is a premier consulting and permanent placement organization focused on hiring talented Information Technology professionals. We offer flexible hiring options which may include W-2 hourly, Salary, 1099, Corp. to Corp. and Direct Hire opportunities.

For immediate consideration, please send a resume to Apply Here with
IT Security Minneapolis 657502 in the subject line.

Holly B. White
NextGen Information Services
Apply Here
www.nextgen-is.com
NextGen is one of America's fastest-growing companies - Inc. 500 Magazine

NextGen is in the business of assisting IT organizations by providing a full suite of specialized staffing and services. We specialize in providing Application Development (Client/Server and Mainframe), Internet Solutions, Conversion/Migration services, IT Security, Technical Support and Network Application Development and Administration. These services are provided in a variety of computing environments using leading technologies, including client/server architectures, object-oriented programming, distributed databases and the latest networking and communication systems. NextGen provides a single source for a broad range of Information Technology professional services, including telecommunications, healthcare, financial services, chemical, and retail business.