Senior Cybersecurity Solution Analyst

Senior Cybersecurity Solution Analyst

Oakland, CA (Hybrid, working from your remote office and Oakland, CA approximately once per week, or more, based on business needs.)
4 months

Join a collaborative Cybersecurity team focused on protecting critical infrastructure and strengthening the resilience of complex supply chains against evolving cyber threats.

The Senior Cybersecurity Solution Analyst - Strategic Supply Chain Risk Management evaluates, verifies, and improves the security and resilience of suppliers, vendors, and third-party partners. This role leads risk assessments, control reviews, remediation tracking, and ongoing monitoring to ensure alignment with organizational standards, regulatory requirements, and industry best practices.

• Lead strategic cybersecurity risk assessments, audits, and verification activities for suppliers and third-party partners.
• Assess supply chain risk and partner with business units and third parties to document, mitigate, and monitor risks.
• Develop and maintain metrics, documentation, and reporting for leadership and operational teams.
• Validate security controls by reviewing evidence, interpreting test results, and informing risk decisions.
• Refine control test procedures, analytical tools, and testing methods for supply chain environments.
• Partner with procurement, legal, and compliance teams to embed cybersecurity requirements into supplier onboarding and contracts.
• Update supply chain security controls as business needs, risks, and threats evolve.
• Monitor emerging supply chain threats, vulnerabilities, and cybersecurity best practices.
• Enhance detection capabilities and test coordinated response processes for supply chain cybersecurity incidents.
• Engage business owners and operational stakeholders to address control gaps and strengthen security posture.
• Perform other duties as needed to support the supply chain risk management program.
• Use AI-enabled tools to support risk assessments, evidence review, reporting, and prioritization.

Minimum:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent experience.
• Utility industry experience.
• Three years of information technology experience.
• Information technology security certification.

• Master's degree in Computer Science, Cybersecurity, Information Systems, or related field.
• Five or more years of experience in IT security, risk management, or supply chain cybersecurity.
• Strong knowledge of cybersecurity frameworks and standards, including NIST and ISO.
• Strong analytical, communication, and stakeholder engagement skills.
• Relevant certifications such as CISSP, CISM, CRISC, or CCSK.
• Ability to travel up to 10%.
• Experience in utility, critical infrastructure, or large enterprise supply chain environments.
• Technical documentation and project management skills.
• Ability to lead cross-functional initiatives to completion.
• Broad experience across IT, security, and privacy domains.
• Ability to provide technical leadership and subject matter expertise.

• Experience applying AI, automation, or analytics tools to cybersecurity, risk management, or supplier assessments.
• Familiarity with AI governance, responsible AI, data protection, and emerging AI security risks.
• Ability to evaluate AI-enabled vendor capabilities and communicate related risks.