Senior Patch Management Analyst

At ERCOT, our diverse and dynamic work environment provides a platform on which employees can work together to build the future of the Texas power grid and wholesale market utilizing the latest technologies and resources. We encourage you to join our talented, dedicated workforce to develop world-class solutions for today and tomorrow's energy challenges while learning new skills and growing your career.

ERCOT is committed to fostering inclusion at all levels of our company. It is the cornerstone of our corporate values of accountability, leadership, innovation, trust, and expertise. We know that individuals with a wide variety of talents, ideas, and experiences propel the innovation that drives our success. An inclusive and diverse workforce strengthens us and allows for a collaborative environment to solve the challenges that face our industry today and in the future.

JOB SUMMARY

Governs patch management processes and improve reporting efficiency through independent oversight and planning for the defined set of onboarded CI types within the Patch Management scope. Responsible for the content, publication, communication, and clarification of Patch Management standards, policies, procedures, Knowledge-Base Articles (KBAs) and related SharePoint resources. Servers at the point of contact for internal and external questionnaires and regulatory queries related to Patch Management.

JOB DUTIES

* Understands and applies principles, theories and concepts related to the profession and ERCOT's culture.

* Exercises judgment within defined procedures and practices to determine appropriate action.

* Impact is generally limited to specific assignments or projects.

* May respond to inquiries and/or provide assistance and/or guidance to lower level workers.

ADDITIONAL JOB DUTIES

* Serves as a subject matter expert (SME) for Patch Management processes and procedures, maintaining its accuracy, completeness and integrity.

* Develops and maintains patch management policies, procedures, and schedules that align with security requirements and minimize operational impact.

* Leads the onboarding, updating and decommissioning of Patch Management CIs.

* Leads the planning, monitoring and deployment of security patches and updates to servers, workstations, and applications.

* Facilitates and collaborates with Cybersecurity and other IT organizations to evaluate vulnerabilities, prioritize remediation efforts, and ensure timely patching of critical systems.

* Generates comprehensive dashboards and reports on patch compliance, system status, and vulnerabilities, and communicate findings to stakeholders.

* Provides guidance and mentorship to other team members on patch management with best practices and tools.

* Ensures all patching activities comply with organizational security policies, industry standards, and relevant regulations.

EXPERIENCE

* Requires minimum 5 years job related work experience in excess of degree requirements

* Requires minimum 5 years progressively responsible experience in an IT role, cybersecurity with a focus on patch management and configuration management

* Experience with vulnerability scanning tools and security frameworks

* Exposure to Service Now Vulnerability Management processes and data model

* Strong analytical, problem-solving, and risk assessment skills

* Ability to write SQL statements

* Proven ability to lead projects, mentor junior staff, and communicate technical information effectively to both technical and non-technical audiences.

EDUCATION

* Bachelor's Degree:
Business, Computer Science, Data Science, Information Systems or related field (Required)

* or a combination of education and experience that provides equivalent knowledge to a major in such fields is required

CERTIFICATION

* ITIL Foundation (Preferred)

* CMDB Fundamentals (Preferred)

* CompTIA Security+, ISC2 Certified in Cybersecurity (Bonus)

WORK LOCATION - Taylor, TX:

* Employees will be required to be on-site in Taylor, TX at minimum 2 days per week, or more, as needed based on the business needs as determined by management

* On-site schedules are flexible or may be rotated based on business needs as determined by the Manager

* Remote work is required to be performed from your Texas residence.

* Employees may opt to work on-site more than required or 100% of the time

The foregoing description reflects the minimum qualifications and the essential functions of the position that must be performed proficiently with or without reasonable accommodation for individuals with disabilities. It is not an exhaustive list of the duties expected to be performed, and management may, at its discretion, revise or require that other or different tasks be performed as assigned. This job description is not intended to create a contract of employment with ERCOT.

Both ERCOT and the employee may exercise their employment-at-will rights at any time. #LI-DN

ERCOT is firmly committed to equal employment for all qualified persons without regard to race, sex, medical condition, religion, age,…