Sr Info Security Analyst I

Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service. Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania.

Duquesne Light Company is committed to creating a culture of inclusion. We value and respect the unique differences and experiences of our employees. We believe that our differences lead to better collaboration, innovation and outcomes. We want you to join our team!

Overall Purpose:

DLC is seeking candidates for the role of Sr. Information Security Analyst I on the Cybersecurity Operations (“CyberOps”) team, directly supporting NERC CIP requirements and critical infrastructure security. The Sr Information Security Analyst is expected to understand the organization’s information security strategy and contribute to the development, maintenance, and implementation of the overall system-wide information security program needed for the protection of Duquesne Light.

As part of the CyberOps team the Sr Information Security Analyst will need to possess business acumen and the ability to assess security risks, while considering system operational needs and adherence to regulatory requirements, directly anticipating and articulating potential operational impacts of policy and controls changes. They will utilize various tools and methods to provide support to end users, technology teams, and projects on a regular and ad hoc basis.

The Information Security Analyst will be directly responsible for working collaboratively and effectively with individuals across the enterprise to conduct cybersecurity activities including but not limited to: analyzing information security risk and threat data, monitoring and investigating anomalies, developing security controls/solutions and risk mitigation recommendations, executing system and application hardening, conducting vulnerability assessments, determining information security-related business needs and requirements for potential projects/initiatives, and diligent monitoring of networks and systems for signs of infection, compromise, and misconfiguration.

Location: Hybrid (see below), downtown Pittsburgh, Pennsylvania at Woods Run Complex

Job Responsibilities:

Education/Certification:

Skills and Abilities Utilized in this Role Include:

Must possess a positive attitude and strong values that fit with DLC’s core values:

Scope

Primary focus is on daily deliverables, outputs and reporting. Typically, accountable for managing one's own time and workflow. Responsible for using prescribed guidelines to analyze situations and solve problems. Work activities are typically moderate to complex in nature, requiring the incumbent to draw on previous knowledge to perform role. Continues to build knowledge base but has a solid foundation to act independently the majority of the time. Still draws on experts and managers when needed but less frequently.

Decision Impact

Problems and issues faced are vague. Draws on past experience on a regular basis. Accountable for direct level of reasoning and decision making.

Hybrid Work

Position follows our hybrid work model, with a minimum of two days working in the office and the remaining days working remotely. Reporting location and frequency may be subject to change based on job role and department needs.

Storm Roles

All Non-Union Employees will serve in storm roles as appropriate to their role and skillset. Please be sure to discuss storm roles with the hiring manager for this position, as duties can vary across the Company. Examples of storm roles could include but aren't limited to duties such as working with operations for service center support or with the communications, customer service or government affairs teams to respond to public and customer requests for information, etc.

Data Governance

Utilize data to make business decisions as appropriate for the position, support data stewardship activities and partner with IT on underlying data needs.

EQUAL OPPORTUNITY EMPLOYER

Duquesne Light Holdings is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability, sexual orientation and gender identity or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation. This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment. An integral part of Duquesne Light Holdings' commitment is to comply with all applicable federal, state and local laws concerning equal employment and affirmative action.

Duquesne Light Holdings is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at HR@duqlight.com and describe the specific accommodation requested for a disability-related limitation.