Portland General Electric
ISOC Operational Security Analyst
Portland General Electric, Tualatin, Oregon, United States, 97062
At PGE, our work involves dreaming about, planning for, and realizing a smarter, cleaner, more enduring Oregon neighborhood. Its core to our DNA and we haven’t stopped since we started in 1888. We energize lives, strengthen communities and drive advancements in energy that promote social, economic and environmental progress. We’re always on the lookout for people passionate about leading and being a part of teams that are advancing innovative clean energy solutions that are also affordable and accessible to all.
ISOC Operational Security Monitor
The ISOC Operational Monitor evaluates and maintains systems and procedures to safeguard internal information systems, network, databases and web-based security. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach. Areas of focus may include threat intelligence, incident response and forensics or vulnerability management.
Key Job Information
Staff ISOC Operational Security Analyst 6160 Grade 6
Career Level: P2 Intermediate Professional Requires expanded professional-level knowledge and experience in own area; incumbents continue to acquire higher-level knowledge and skills Expands on high-level knowledge of the company, processes and customers Solves a range of more complex problems Analyzes possible solutions using advanced knowledge and applying protocols Operates independently and receives only a moderate level of guidance and direction
Key Responsibilities
Information Security Performs basic risk assessments for small information systems.
Communicates information security risks and issues to business managers and others. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organizational policy and local risk assessments. Responds to security breaches in line with security policy and records the incidents and action taken.
Information Assurance - Applies information assurance and security policies to manage risks. Provides advice and guidance to endorse adherence to information assurance architectures, strategies, policies, standards and guidelines. Participates in testing to support information assurance. Contributes to the development of policies, standards and guidelines.
Research - Participates in researching security trends, new methods and techniques used in unauthorized access of data and recommends ways to pre-emptively eliminate the possibility of system breach.
Incident Response - Responds to and records security breaches and action taken. Identifies, registers and categorizes incidents. Gathers information to enable incident resolution and promptly allocates incidents as appropriate. Maintains records and advises relevant persons of actions taken.
Programming/Software - Designs, codes, tests, corrects and documents simple programs or scripts and assists in the implementation of software which forms part of a properly engineered information or communications system.
Education/Experience/Certifications
Education - Requires a bachelor’s degree in cyber security, computer science or other information technology related field or equivalent experience. Experience Typically two or more years in information systems, computer programing, cyber security, information assurance/security or related field.
Competencies (Knowledge, Skills, Abilities)
Functional Competencies
Working knowledge of scripting and automation tools
Working knowledge of principles, practices, methods, technology and tools for securing personnel, facilities and information
Working knowledge of forensic investigative techniques
Working knowledge of IT risk management principles, practices and techniques Working knowledge of network/LAN interfaces
Working knowledge of developments and new applications of IT and their applications to business processes and information systems to meet organizational requirements
General Competencies
Working customer focus skills
Working accuracy skills
Working oral and written communication skills
Working interpersonal skills
Working decision-making skills
Working organization and prioritization skills
Physical and Cognitive Demands
Cognitive Level Intermediate:
Consistent use of relevant principles to solve practical problems and to deal with a variety of concrete variables in situations where only limited standardization exists.
Cognitive Ability to adhere to set response times, deadlines and time-sensitive tasks
Ability to follow accuracy standards
Ability to follow through on decision-making tasks
Ability to interact effectively and collaboratively within a team environment Ability to communicate and problem solve when under stress
Ability to respond and adapt to frequent change
Ability to accept and demonstrate self-awareness when provided constructive feedback
Ability to discern feedback and acknowledge ownership of areas of improvement
Ability to avoid future mistakes by applying reasonable skills to new but similar work situations or tasks
Ability to successfully collaborate with peers, managers and others within the organization Demonstrates sound memory
Ability to process new information to be applied consistently to work tasks
Schedule/Attendance
Ability to adhere to pre-established schedule, including start/stop time and break/lunch schedule
Ability to work long hours
Ability to work a variable schedule
Ability to report to work and perform work during periods of severe inclement weather
Ability to consistently meet attendance standards for regular, reliable, predictable, full-time attendance
Ability to work shift schedule Ability to work on-call schedule
Physical Capabilities
Driving/travel/commute: Daily within service territory - Frequently (at least once a week or more)
Driving/travel/commute: Overnight inside/outside the service territory - Occasionally (one to two times a month or less)
Computer use (use computer regularly for entire work shift)
Lifting/pushing/pulling: Up to 10 lbs.
Carrying: Up to 10 lbs.
Environment - Indoor/Outdoor (check all that apply):
Office
Compensation Range:
$81,450.00 - $135,750.00
Actual total compensation, including a performance based incentive bonus, is commensurate with experience, skills, qualifications, education, training, and internal equity. While we anticipate the selected candidate for this position will fall towards the middle or entry point of the compensation range, the decision will be made on a case-by-case basis.
PGE believes in rewarding dedicated performance. We provide a total rewards package that is designed to reward your contributions to the company, and, at the same time, support your well-being and professional development, both now and into the future. To find out more, click here (https://portlandgeneral.com/hrcs5511) .
Join us today and power your potential!
Assisting with storms or other Company emergencies is a part of all positions at Portland General Electric.
PGE is committed to diversity and inclusion in the workplace and is an equal opportunity employer. PGE will not discriminate against any employee or applicant for employment based on race, color, national origin, gender, gender identity, sexual orientation, age, religion, disability, protected veteran status, or other characteristics protected by law.
PGE does not discriminate on the basis of disability. We recognize individuals have a variety of abilities to offer and we believe there is much to value and celebrate by incorporating different abilities into the work we do. One very important way we live this out is in our application and interview process. We work hard to support individuals who may need an accommodation to fully participate in these processes. If you feel you may need an accommodation, or would like to request one, please notify the Talent Acquisition Specialist (Recruiter) associated with the job posting. You may also make this request by contacting talentacquisition@pgn.com or by calling 503-464-7250. The Recruiter will provide information and next steps for the accommodation process. Our Diversity, Equity & Inclusion (DEI) team is also available for support. You can contact them at dei@pgn.com .
To be considered for this position, please complete the following employment application by the posting close date. Posting closes at midnight (Pacific Time) on the closing date below. If no date is listed, job is open until filled.
ISOC Operational Security Monitor
The ISOC Operational Monitor evaluates and maintains systems and procedures to safeguard internal information systems, network, databases and web-based security. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach. Areas of focus may include threat intelligence, incident response and forensics or vulnerability management.
Key Job Information
Staff ISOC Operational Security Analyst 6160 Grade 6
Career Level: P2 Intermediate Professional Requires expanded professional-level knowledge and experience in own area; incumbents continue to acquire higher-level knowledge and skills Expands on high-level knowledge of the company, processes and customers Solves a range of more complex problems Analyzes possible solutions using advanced knowledge and applying protocols Operates independently and receives only a moderate level of guidance and direction
Key Responsibilities
Information Security Performs basic risk assessments for small information systems.
Communicates information security risks and issues to business managers and others. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organizational policy and local risk assessments. Responds to security breaches in line with security policy and records the incidents and action taken.
Information Assurance - Applies information assurance and security policies to manage risks. Provides advice and guidance to endorse adherence to information assurance architectures, strategies, policies, standards and guidelines. Participates in testing to support information assurance. Contributes to the development of policies, standards and guidelines.
Research - Participates in researching security trends, new methods and techniques used in unauthorized access of data and recommends ways to pre-emptively eliminate the possibility of system breach.
Incident Response - Responds to and records security breaches and action taken. Identifies, registers and categorizes incidents. Gathers information to enable incident resolution and promptly allocates incidents as appropriate. Maintains records and advises relevant persons of actions taken.
Programming/Software - Designs, codes, tests, corrects and documents simple programs or scripts and assists in the implementation of software which forms part of a properly engineered information or communications system.
Education/Experience/Certifications
Education - Requires a bachelor’s degree in cyber security, computer science or other information technology related field or equivalent experience. Experience Typically two or more years in information systems, computer programing, cyber security, information assurance/security or related field.
Competencies (Knowledge, Skills, Abilities)
Functional Competencies
Working knowledge of scripting and automation tools
Working knowledge of principles, practices, methods, technology and tools for securing personnel, facilities and information
Working knowledge of forensic investigative techniques
Working knowledge of IT risk management principles, practices and techniques Working knowledge of network/LAN interfaces
Working knowledge of developments and new applications of IT and their applications to business processes and information systems to meet organizational requirements
General Competencies
Working customer focus skills
Working accuracy skills
Working oral and written communication skills
Working interpersonal skills
Working decision-making skills
Working organization and prioritization skills
Physical and Cognitive Demands
Cognitive Level Intermediate:
Consistent use of relevant principles to solve practical problems and to deal with a variety of concrete variables in situations where only limited standardization exists.
Cognitive Ability to adhere to set response times, deadlines and time-sensitive tasks
Ability to follow accuracy standards
Ability to follow through on decision-making tasks
Ability to interact effectively and collaboratively within a team environment Ability to communicate and problem solve when under stress
Ability to respond and adapt to frequent change
Ability to accept and demonstrate self-awareness when provided constructive feedback
Ability to discern feedback and acknowledge ownership of areas of improvement
Ability to avoid future mistakes by applying reasonable skills to new but similar work situations or tasks
Ability to successfully collaborate with peers, managers and others within the organization Demonstrates sound memory
Ability to process new information to be applied consistently to work tasks
Schedule/Attendance
Ability to adhere to pre-established schedule, including start/stop time and break/lunch schedule
Ability to work long hours
Ability to work a variable schedule
Ability to report to work and perform work during periods of severe inclement weather
Ability to consistently meet attendance standards for regular, reliable, predictable, full-time attendance
Ability to work shift schedule Ability to work on-call schedule
Physical Capabilities
Driving/travel/commute: Daily within service territory - Frequently (at least once a week or more)
Driving/travel/commute: Overnight inside/outside the service territory - Occasionally (one to two times a month or less)
Computer use (use computer regularly for entire work shift)
Lifting/pushing/pulling: Up to 10 lbs.
Carrying: Up to 10 lbs.
Environment - Indoor/Outdoor (check all that apply):
Office
Compensation Range:
$81,450.00 - $135,750.00
Actual total compensation, including a performance based incentive bonus, is commensurate with experience, skills, qualifications, education, training, and internal equity. While we anticipate the selected candidate for this position will fall towards the middle or entry point of the compensation range, the decision will be made on a case-by-case basis.
PGE believes in rewarding dedicated performance. We provide a total rewards package that is designed to reward your contributions to the company, and, at the same time, support your well-being and professional development, both now and into the future. To find out more, click here (https://portlandgeneral.com/hrcs5511) .
Join us today and power your potential!
Assisting with storms or other Company emergencies is a part of all positions at Portland General Electric.
PGE is committed to diversity and inclusion in the workplace and is an equal opportunity employer. PGE will not discriminate against any employee or applicant for employment based on race, color, national origin, gender, gender identity, sexual orientation, age, religion, disability, protected veteran status, or other characteristics protected by law.
PGE does not discriminate on the basis of disability. We recognize individuals have a variety of abilities to offer and we believe there is much to value and celebrate by incorporating different abilities into the work we do. One very important way we live this out is in our application and interview process. We work hard to support individuals who may need an accommodation to fully participate in these processes. If you feel you may need an accommodation, or would like to request one, please notify the Talent Acquisition Specialist (Recruiter) associated with the job posting. You may also make this request by contacting talentacquisition@pgn.com or by calling 503-464-7250. The Recruiter will provide information and next steps for the accommodation process. Our Diversity, Equity & Inclusion (DEI) team is also available for support. You can contact them at dei@pgn.com .
To be considered for this position, please complete the following employment application by the posting close date. Posting closes at midnight (Pacific Time) on the closing date below. If no date is listed, job is open until filled.