Information Security Engineer III or Sr

Select how often (in days) to receive an alert:

Job Title: Information Security Engineer III or Sr.

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

This is a hybrid position open to New Orleans, LA, Little Rock, AR, and The Woodlands, TX. Relocation assistance and Sponsorship is not provided.

Brief Position Description

The Information Security Engineer III or Sr. implements and executes a framework to ensure that the security organization's practices remain observant to compliance directives required by North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54), and internal Operational Technology (OT) security controls. The Information Security Engineer III or Sr. will enforce necessary cyber security and compliance policies and procedures.

The Information Security Engineer III or Sr. will track and trend compliance effectiveness and propose program adjustments to address issues. This role is responsible for ensuring Entergy adapts to emerging regulations and works to continually improve the security organization’s regulatory compliance posture. The role is critical to ensure Information Security (IS) complies with all applicable federal, state & local regulatory requirements.

The primary focus of this role is regulatory compliance and assessments, with some technical execution responsibilities as the role grows into the program.

This role will participate in communications with governmental agencies, information sharing centers, and industry peers on the status of Entergy’s regulatory compliance status.

Key responsibilities include:

• Responsible for coordinating the regulatory program within IS to ensure strict adherence with the North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54) and Sarbanes Oxley (SOX) requirements
• Document CS processes and procedures into process flows and apply a risk-based approach to determine areas of weakness utilizing frameworks such as COBIT and NIST
• Responsible as the tertiary contact within the CS organization for communicating with executives, external regulators, and Entergy oversight entities on all aspects of compliance initiatives and status
• Responsible for effectively conducting compliance assessments to ensure adherence to Entergy policies and regulatory requirements across the various CS groups and Business Units.
• Effectively communicate results to the Manager, Director, and senior leadership
• Track the status of compliance programs and initiatives across the CS organization and assist with coordination of compliance activities with internal and external audit entities
• Participate in the execution of OT Cyber Security Programs, including but not limited to:
  • Asset Inventory Management
  • Configuration Management
  • Change Management
  • Recovery Plans
  • Security Monitoring
  • Vulnerability Management
  • Transient Cyber Asset Management
• Ideate and implement improvement opportunities for existing processes, toolsets, documentation, etc.
• Track Key Performance Indicators (KPI) to measure the IS organization's effectiveness in meeting its business performance expectations and adhering to applicable compliance requirements; communicate findings to the Director and senior leadership
• Assist with establishing policies and procedures for conducting periodic compliance assessments, aggregating results and communicating with various levels of management
• Identify gaps between Entergy’s policies and procedures and current industry standards and report to Director on results
• Participate in the Corrective Action Program (CAP) process for evaluating the conditions adverse to quality, safety, security and compliance; set priorities in correcting problems and tracking them until they have been corrected
• Deliver on continuous improvement of IS compliance with regulatory and company standards
• Maintain awareness of changing regulatory requirements, review Entergy policies, and recommend revisions to remain compliant to changing regulations
• Coordinate with other departments when drafting and…