National Grid IT Analyst/ITEngineer – SCADA Maintenance, Security & Compliance in Northborough, Massachusetts

_About the Position:_* *

The National Grid Service Delivery CNI department has an opening in the Gas SCADA group to support activities associated with the maintenance, monitoring, and security compliance of the Gas SCADA system. This position will have primary responsibility to support tools used to monitor system health, configuration management, and system security to ensure the compliance with NERC CIP standards and corporate policies. The position will also support day to day activities associated with the maintenance of the Gas SCADA system.

*Position Responsibilities (including but not limited to): *

  • Utilize and maintain automated software tools such as Solar Winds, Sourcefire, Tripwire, Nessus, Skybox, and Lancope products.

  • Monitor and maintain the overall health of the gas SCADA system including workstations, servers, communications’ equipment and application software.

  • Ensure that configuration and change management processes are documented accurately and actions taken are compliant with National Grid policies.

  • Ensure that tools accurately discover and inventory appropriate devices.

  • Ensure all existing and newly added devices have an accurate baseline.

  • Monitor device changes, investigate and document change reasons. Create security incidents for unauthorized changes.

  • Ensure device logging is active and forwarding properly to the appropriate repository.

  • Ensure log retention is consistent with regulatory standards.

  • Tune whitelisting rules as required to support required application activity.

  • Coordinate with the GMS support staff and application vendors, including GMS vendors, to evaluate patches.

  • Develop, maintain and retain reports as necessary to demonstrate compliance with configuration and change management regulations.

  • Conduct periodic vulnerability assessments. Ensure vulnerabilities are documented, develop remediation plans and track activities to completion.

  • Serve as the subject matter expert for configuration and change management in assessments and audits.

  • Work cooperatively with other NERC CIP Compliance analysts, cross-train in additional compliance activities and serve as a backup as necessary.

  • Participate in department and/or cross-functional teams to complete special projects or assignments as requested

  • Participate in team meetings and conference calls to ensure awareness of ongoing activities and priorities.

  • Respond to major incidents as part of a team.

  • Participate in an on call rotation, providing after-hours and storm support when required.

  • Occasional travel to support GMS in other regions or attend training and conferences.

_Knowledge & Experience Required:_* *

  • Bachelor's degree in computer science or any engineering discipline.

  • Must possess strong writing, verbal communication and documentation skills and the ability to achieve and communicate with a sense of urgency

  • Ability to work with a variety of personnel and be conversant with both technical and business-oriented personnel

  • Competency with network security and information security concepts and technologies

  • Ability to meet pressured deadlines, time constraints and periodic requirements

  • Demonstrated ability to develop long-range program plans, set goals and objectives, and decisions on program priorities and analyze program effectiveness

  • Experience with Windows operating systems.

_Familiarity with the following is desirable:_

  • Intrusion Detection

  • Patch Management

  • Change Management

  • Configuration Management

  • Incident management response

  • Risk assessment methodologies

  • Information protection (including information classification)

  • Disaster recovery planning

  • General industry process control security standards

  • Identity and access management

  • Intrusion detection and prevention

  • Secure network architecture

  • NERC CIP 002-011 Standards

  • The Standards of Good Practice for Information Security

  • Microsoft Excel and Access

_Job Dimensions:_

This position will report to the manager of GMS in the CNI organization. The position is located in Northborough, MA. Periodic interface with Internal Audit will be required to support audit and compliance activities. Entry level candidates will be considered.

/National Grid is an equal opportunity employer that values a broad diversity of talent, knowledge, experience and expertise. We foster a culture of inclusion that drives employee engagement to deliver superior performance to the communities we serve. National Grid is proud to be an affirmative action employer, committed to providing equal opportunity to employees and applicants for employment without regard to race, color, religion, creed, national origin, ancestry, alienage or citizenship status, gender, sexual orientation, gender identity or expression, age, physical and mental disability, marital status, veteran status, predisposing genetic characteristics, or any other factor protected from discrimination under municipal, state, or federal law. We encourage all interested, qualified persons to join the National Grid team./

Job: *IS Service Delivery

Organization: *IS Service Delivery

Title: IT Analyst/ITEngineer – SCADA Maintenance, Security & Compliance

Location: MA-Northborough

Requisition ID: 20182094