Cybersecurity Risk Information Sharing Program Intern - (Summer)

# Our Company

The North American Electric Reliability Corporation (NERC) is a not-for-profit international regulatory authority whose mission is to assure the effective and efficient reduction of risks to the reliability and security of the grid. NERC develops and enforces Reliability Standards; annually assesses seasonal and long-term reliability; monitors the bulk power system through system awareness; and educates, trains, and certifies industry personnel. NERC’s area of responsibility spans the continental United States, Canada, and the northern portion of Baja California, Mexico. NERC is the Electric Reliability Organization (ERO) for North America, subject to oversight by the Federal Energy Regulatory Commission (FERC) and provincial authorities in Canada. NERC's jurisdiction includes users, owners, and operators of the bulk power system, which serves nearly 400 million people.

# Our Mission

The vision for the ERO Enterprise, which is comprised of NERC and the six Regional Entities, is a highly reliable and secure North American bulk power system. Our mission is to assure the effective and efficient reduction of risks to the reliability and security of the grid. The mission of the Performance Analysis program is to evaluate reliability performance of the bulk power system using data provided from NERC registered entities and identify areas of concern regarding trends and risks to the North American electricity industry.

# Your Impact

The Summer Intern is a member of the Cybersecurity Risk Information Sharing Program (CRISP) team within the Electricity Information Sharing and Analysis Center (E-ISAC) Intelligence Group. This ten-week paid summer internship will focus on both programmatic and technical support for CRISP. The successful candidate will be eager to learn both components of this unique program. This role reports to the CRISP Senior Program Analyst.

# Your Responsibilities and Qualifications

Responsibilities

- Research and define meaningful cybersecurity metrics of CRISP participants

- Perform data pulls, normalization, and analysis from multiple sources

- Collaborate with various program teams to validate data accuracy and usability

- Document methodologies, assumptions, and data sources for reuse and transparency

- Other projects as assigned

- Present final report and presentation at the end of the internship to E-ISAC senior management

Strongly Desired Skills

- Experience or coursework in data analytics, statistics, information systems, and/or cybersecurity

- Ability to conduct research and translate findings into clear visuals and graphics

- Familiarity with data visualization concepts (charts, heat maps, dashboards)

- Strong attention to detail and data accuracy

Bonus Skills (Nice to Have)

- Familiarity with Power BI

- Familiarity to Salesforce (SF) reporting or data extraction

- Basic understanding of cybersecurity concepts

Qualifications

- A junior or senior in an accredited undergraduate program; or attending an accredited graduated school program; or completed first year of a trade school; or completed an undergraduate, graduate or trade school program within six months of the start of the internship

- 3.0 out of 4.0 GPA

- Proficiency in Microsoft Office applications

- Strong teamwork, interpersonal, and communications skills

Other

- Background check will be conducted prior to internship.

- In compliance with federal law, all persons engaged for internships are required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon internship.

- The CRISP team is based in Washington D.C. This position is remote but may be requested to travel to the NERC and E-ISAC offices as well as partner locations. Reimbursement of travel expenses will be in accordance with the company’s travel and expense reimbursement policies.

- The candidate will also be asked to take some technical and/or security training and complete the certificate for that training. The options are as follows: A+CE, CCNA-Security, CND, Network+CE, SSCP, CAP, CND, Cloud+, GLSC, Security+CE.

Our Culture Declarations

- Everyone at NERC is a leader.

- We are accountable personally and organizationally to deliver on commitments.

- We develop ourselves and people in the organization to ensure that NERC realizes its strategic objectives.

- We are resilient and adaptable to the challenges and needs of the business/people.

- We exude a growth mindset and empower teams to take risks.

- Build collaborative relationships within NERC, the ERO, and the stakeholders of NERC.

- We exemplify NERC cultural behaviors:

- Reward, high-quality, creative, and innovative work;

- Attract, engage, and retain top talent;

- Value and respect diverse perspectives;

- Provide a safe, inclusive, and collaborative work environment; and

- Form strong relationships within the company, and with the ERO Enterprise.

- We demonstrate curiosity in a wide variety of areas and are open to exploring new situations, knowledge and opportunities for growth and development.

- We demonstrate an anticipatory mindset; preventing problems and building contingencies where appropriate.

- We are champions for diversity and inclusion. Seeks out and values diverse perspectives.