National Grid IT Analyst/ITEngineer – SCADA Maintenance, Security & Compliance in Northborough, Massachusetts
_About the Position:_* *
The National Grid Service Delivery CNI department has an opening in the Gas SCADA group to support activities associated with the maintenance, monitoring, and security compliance of the Gas SCADA system. This position will have primary responsibility to support tools used to monitor system health, configuration management, and system security to ensure the compliance with NERC CIP standards and corporate policies. The position will also support day to day activities associated with the maintenance of the Gas SCADA system.
*Position Responsibilities (including but not limited to): *
Utilize and maintain automated software tools such as Solar Winds, Sourcefire, Tripwire, Nessus, Skybox, and Lancope products.
Monitor and maintain the overall health of the gas SCADA system including workstations, servers, communications’ equipment and application software.
Ensure that configuration and change management processes are documented accurately and actions taken are compliant with National Grid policies.
Ensure that tools accurately discover and inventory appropriate devices.
Ensure all existing and newly added devices have an accurate baseline.
Monitor device changes, investigate and document change reasons. Create security incidents for unauthorized changes.
Ensure device logging is active and forwarding properly to the appropriate repository.
Ensure log retention is consistent with regulatory standards.
Tune whitelisting rules as required to support required application activity.
Coordinate with the GMS support staff and application vendors, including GMS vendors, to evaluate patches.
Develop, maintain and retain reports as necessary to demonstrate compliance with configuration and change management regulations.
Conduct periodic vulnerability assessments. Ensure vulnerabilities are documented, develop remediation plans and track activities to completion.
Serve as the subject matter expert for configuration and change management in assessments and audits.
Work cooperatively with other NERC CIP Compliance analysts, cross-train in additional compliance activities and serve as a backup as necessary.
Participate in department and/or cross-functional teams to complete special projects or assignments as requested
Participate in team meetings and conference calls to ensure awareness of ongoing activities and priorities.
Respond to major incidents as part of a team.
Participate in an on call rotation, providing after-hours and storm support when required.
Occasional travel to support GMS in other regions or attend training and conferences.
_Knowledge & Experience Required:_* *
Bachelor's degree in computer science or any engineering discipline.
Must possess strong writing, verbal communication and documentation skills and the ability to achieve and communicate with a sense of urgency
Ability to work with a variety of personnel and be conversant with both technical and business-oriented personnel
Competency with network security and information security concepts and technologies
Ability to meet pressured deadlines, time constraints and periodic requirements
Demonstrated ability to develop long-range program plans, set goals and objectives, and decisions on program priorities and analyze program effectiveness
Experience with Windows operating systems.
_Familiarity with the following is desirable:_
Incident management response
Risk assessment methodologies
Information protection (including information classification)
Disaster recovery planning
General industry process control security standards
Identity and access management
Intrusion detection and prevention
Secure network architecture
NERC CIP 002-011 Standards
The Standards of Good Practice for Information Security
Microsoft Excel and Access
This position will report to the manager of GMS in the CNI organization. The position is located in Northborough, MA. Periodic interface with Internal Audit will be required to support audit and compliance activities. Entry level candidates will be considered.
/National Grid is an equal opportunity employer that values a broad diversity of talent, knowledge, experience and expertise. We foster a culture of inclusion that drives employee engagement to deliver superior performance to the communities we serve. National Grid is proud to be an affirmative action employer, committed to providing equal opportunity to employees and applicants for employment without regard to race, color, religion, creed, national origin, ancestry, alienage or citizenship status, gender, sexual orientation, gender identity or expression, age, physical and mental disability, marital status, veteran status, predisposing genetic characteristics, or any other factor protected from discrimination under municipal, state, or federal law. We encourage all interested, qualified persons to join the National Grid team./
Job: *IS Service Delivery
Organization: *IS Service Delivery
Title: IT Analyst/ITEngineer – SCADA Maintenance, Security & Compliance
Requisition ID: 20182094