Cyber and Information Security Analyst - Cyber Security & TSOC

First Energy at a Glance

We are a forward‑thinking electric utility powered by a diverse team of employees committed to making customers' lives brighter, the environment better and our communities stronger.

First Energy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, First Energy includes one of the nation's largest investor‑owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid‑Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

This is an open position with First Energy Service Co., a subsidiary of First Energy Corp. [SC00]. This position's reporting location is in Akron, Ohio, and reports to the Manager of Cyber Security Compliance. Candidates must reside within commute distance of the First Energy Headquarters or be willing to relocate.

The Cyber Security Compliance Analyst supports First Energy’s commitment to safety, integrity, accountability, collaboration, and continuous improvement by ensuring strong, sustainable cyber security compliance practices across the enterprise. This role partners with Cyber Security, IT, OT, and business stakeholders across all First Energy subsidiaries to protect cyber and information assets and support compliance with mandatory reliability, cyber security, and information protection requirements, including NERC Critical Infrastructure Protection (CIP) standards and state regulations.

The successful candidate applies cyber security and compliance expertise in a manner that upholds First Energy’s values, promotes a strong compliance culture, and enables reliable and secure electric service to customers.

• Serve as a trusted subject matter expert (SME) for cyber security compliance requirements, providing clear, accurate, and ethical guidance to Cyber Security, IT, OT, and business units.
• Support First Energy’s compliance with NERC CIP Standards and state regulations, helping ensure the protection of BES Cyber Systems and the reliability of the Bulk Electric System.
• Interpret new and revised regulatory requirements and collaborate with stakeholders to implement compliant, risk‑informed solutions.
• Participate, as appropriate, in industry forums or standards development activities to responsibly represent First Energy’s operational and regulatory interests.

• Identify, assess, and communicate cyber security compliance risks in a manner that supports informed, fact‑based business decisions.
• Support risk remediation, mitigation tracking, and exception management in alignment with First Energy policies, standards, and governance frameworks.
• Translate technical findings and assessment data into clear risk statements and actionable compliance recommendations.

• Guide and oversee ongoing compliance activities across business units, including evidence collection, control validation, and sustainment practices.
• Support internal audits, regulatory audits, self‑certifications, and examinations by coordinating responses and ensuring high‑quality, defensible evidence.
• Promote efficient, repeatable compliance processes that reduce operational burden while maintaining regulatory rigor.

• Educate and engage stakeholders to improve understanding of cyber security compliance responsibilities and reinforce a strong compliance culture.
• Develop and deliver professional communications, training materials, reports, and presentations tailored to both technical and non‑technical audiences.
• Build effective working relationships across organizational boundaries and influence outcomes through expertise, credibility, and collaboration.

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Engineering, Corporate Compliance, or a related discipline preferred.
• A bachelor's degree in another field with relevant cyber security, compliance, or regulated‑industry experience will be considered.
• Experience working in a regulated environment (electric…