Analyst II, Information & Cyber Security

Role Overview

The Analyst II, Information and Cyber Security supports the execution and continuous improvement of enterprise cybersecurity governance, risk, and compliance (GRC) programs. This role focuses on security controls, policy governance, and regulatory compliance, while also contributing to broader cybersecurity initiatives including risk management, third‑party assessments, audit support, and security program operations.

Support the development, maintenance, and enforcement of security policies, standards, and procedures across the enterprise; perform control assessments; develop and maintain dashboards, metrics, and reporting to measure control performance and program maturity; and support NERC CIP compliance activities.

This position provides exposure across multiple cybersecurity domains and offers opportunities to contribute to a growing and evolving cybersecurity program aligned with industry and regulatory best practices.

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, or a related field (or equivalent experience)
• 2+ years of professional experience in cybersecurity, IT security, or GRC-related roles
• Foundational knowledge of security frameworks (e.g., NIST SP 800‑53, ISO 27001, CIS Controls)
• Experience supporting audits, compliance programs, or control assessments
• Strong analytical and problem‑solving skills with attention to detail
• Ability to manage multiple priorities and drive tasks to completion
• Effective communication skills, with the ability to engage both technical and non‑technical stakeholders
• Self‑starter with a proactive mindset and the ability to work independently and collaboratively across teams

• Medical, dental and vision insurance
• 401k
• Paid time off
• Bonus program(s) which are designed to reward individual and company performance