Senior Cybersecurity Analyst, GRC

As the Senior Cybersecurity Analyst, GRC, you will be an integral member of the Governance, Risk and Compliance team within the Cybersecurity Department.

• Development of risk and compliance strategies and create, improve, and monitor company's cybersecurity controls.
• This role will provide high quality cybersecurity and risk management consulting to CenterPoint Energy business leaders and organizations.
• Implement a risk-based approach when evaluating organization technology requirements including hardware and software apart of the governance review process.
• Responsible for development of compliance activities in response to governance review process.
• Partner with internal and external resources to gather data and develop action plans to help drive and achieve results for technology related assessment findings.
• Develops and maintains policies, procedures, baselines, and standards working closely with other peers and managers within IT and across the business.
• Review vendor's cybersecurity documents such as a SIG or CAIQ questionnaire, vendor SOC2 Type II, etc.
• Influence meaningful change within the Cybersecurity organization and beyond.
• Manage cybersecurity projects and initiatives, including leading project plan development, stakeholder engagement, and project status updates.
• Ensures compliance with government, company, and departmental regulations, policies, and procedures.
• Develop Trusted Advisorrelationship with business leaders, to understand business and technical risks, and to provide sound risk management guidance.
• Identification of new or emerging risks and develop mitigation plans.
• Provide technical leadership and security subject matter expertise around a wide range of technologies and business initiatives.
• Driven, energetic, team player with superior oral and written communication skills.
• Superior customer service and interpersonal skills to effectively relate to employee needs; ability to build working relationships promote information-sharing.
• Possess a high degree of originality, creativity, initiative requiring minimal supervision.
• Working knowledge of Microsoft Office Word, PowerPoint, and Exceland performing data analysis.
  
  

Bachelor'sDegree in a business or a technical discipline from an accredited college or university is required.

• A minimum of five (5) years experience in cybersecurity, security auditing, or relevant IT role working with cybersecurity concepts and tools is required.
• Experience in data processing and analytics preferred. CISSP, CRISC, or other relevant certifications preferred.
• In-depth knowledge and experience in technology risk assessments and risk management preferred.
• Demonstrated program and project management planning/execution skills.
• Experience working with common information security standards, such as NIST Cybersecurity Framework (NIST) preferred
  
  

• Ableto communicate either written and verbal communications either in person or through technical equipment such as telephone.
• Able to demonstrate and apply the manual dexterity to operate a personal computer and common office equipment.
• Able to sit, stand or walk for long periods of time.
• Able to exert up to 10 pounds of force occasionally, and/or a minimal amount of force frequently to lift, carry, push, pull, or otherwise move objects.

• Requiredto participate in CenterPoint Energy's Emergency Operation Plan (EOP).