IT Analyst, Operational Technology and Cyber

Who We Are

We are a team of motivated, engaged, and exceptionally talented self-starters, willing to roll up our sleeves and do what is necessary to get the job done. If you are interested in joining this dynamic team and have a passion to learn, develop, and want your experience to make an immediate impact, please apply.

To find out more about us, please visit our website:(Use the "Apply for this Job" box below)..org

We offer an environment of continuous development and growth with a thriving company culture, exceptional colleagues, and exceptional benefits. Our benefit package includes:

• Hybrid work options available and flexible hours
• Excellent health insurance
• No employee cost for dental and vision insurance
• Paid holidays and generous paid time off
• Professional development opportunities
• Educational assistance opportunities
• Multiple retirement plan options with company contribution
• Short-term and long-term disability coverage
• Flexible spending account with company contribution
• Life Insurance
• 529 College Savings Program
• $300 Wellness Reimbursement

The IT Analyst, Operational Technology (OT) and Cyber is responsible for the oversight of Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) environments, and the protection of operational technology assets from cyber threats. This role focuses on identifying vulnerabilities, monitoring security events, supporting incident response, and ensuring the resilience of critical infrastructure systems in use by the Operating Services Company.

The IT Analyst works closely with internal and Operating Company engineering, IT, operations, and compliance teams to strengthen cybersecurity across industrial environments while maintaining system availability, safety, and regulatory compliance.

• Monitor the Service Provider’s performance of managing the OT environments for cyber threats, anomalies, and suspicious activity using security tools and platforms and consult with, and advise, the Service Provider’s OT group for any issues observed.
• Analyze alerts and incidents affecting industrial systems, including SCADA, PLCs, HMIs, DCS, and related infrastructure.
• Conduct risk assessments and vulnerability reviews for OT assets and industrial networks. Partner with the OT Cyber group to ensure all incidents are fully investigated and appropriate response measures are taken to remediate risks.
• Support incident response efforts for cybersecurity events impacting operational environments.
• Assist in developing, documenting and maintaining OT cybersecurity policies, standards, and procedures to minimize system risks and vulnerabilities.
• Collaborate with engineering and operations teams to resolve issues, implement security controls and assist in the annual testing for the OT environments with minimal disruption to production.
• Maintain accurate and current asset inventories, network diagrams, and system baselines for OT environments.
• Evaluate and recommend security technologies for industrial systems.
• Participate in security audits, compliance assessments, and regulatory reporting.
• Track emerging OT cyber threats, vulnerabilities, and industry best practices and provide recommendations on what practices should be modified to ensure LIPA and the service provider align with best practices.
• Support disaster recovery, business continuity, and resilience planning for operational systems.
• Perform other related duties, as necessary.

• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field or equivalent experience.
• Three (3) years of experience in cybersecurity, industrial control systems, or operational technology environments.
• Experience in critical infrastructure sectors such as utilities, manufacturing, transportation, or energy.
• Experience with threat intelligence and industrial cyber risk management.
• Experience conducting risk assessments, incident response, and forensic analysis in operational environments.
• Must possess at least one (1) of the following industry certifications: GIAC GICSP, CISSP, Security+, or ISA/IEC 62443 certifications.
• Knowledge of Windows, Linux, and embedded industrial systems.
• Familiar…