Senior Cybersecurity Solution Analyst

Senior Cybersecurity Solution Analyst

Department Overview

The Cybersecurity department protects critical assets and strengthens security across the enterprise. The team partners with IT, business, engineering, and external stakeholders to manage risk, support compliance, and improve security resilience, with a strong focus on supply chain cybersecurity.

Position Summary

Join a collaborative Cybersecurity team focused on protecting critical infrastructure and strengthening the resilience of complex supply chains against evolving cyber threats.

The Senior Cybersecurity Solution Analyst - Strategic Supply Chain Risk Management evaluates, verifies, and improves the security and resilience of suppliers, vendors, and third-party partners. This role leads risk assessments, control reviews, remediation tracking, and ongoing monitoring to ensure alignment with organizational standards, regulatory requirements, and industry best practices.

Job Responsibilities

• Lead strategic cybersecurity risk assessments, audits, and verification activities for suppliers and third-party partners.
• Assess supply chain risk and partner with business units and third parties to document, mitigate, and monitor risks.
• Develop and maintain metrics, documentation, and reporting for leadership and operational teams.
• Validate security controls by reviewing evidence, interpreting test results, and informing risk decisions.
• Refine control test procedures, analytical tools, and testing methods for supply chain environments.
• Partner with procurement, legal, and compliance teams to embed cybersecurity requirements into supplier onboarding and contracts.
• Update supply chain security controls as business needs, risks, and threats evolve.
• Monitor emerging supply chain threats, vulnerabilities, and cybersecurity best practices.
• Enhance detection capabilities and test coordinated response processes for supply chain cybersecurity incidents.
• Engage business owners and operational stakeholders to address control gaps and strengthen security posture.
• Perform other duties as needed to support the supply chain risk management program.
• Use AI-enabled tools to support risk assessments, evidence review, reporting, and prioritization.

Qualifications

Minimum:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent experience.
• Utility industry experience.
• Three years of information technology experience.
• Information technology security certification.

Desired

• Master's degree in Computer Science, Cybersecurity, Information Systems, or related field.
• Five or more years of experience in IT security, risk management, or supply chain cybersecurity.
• Strong knowledge of cybersecurity frameworks and standards, including NIST and ISO.
• Strong analytical, communication, and stakeholder engagement skills.
• Relevant certifications such as CISSP, CISM, CRISC, or CCSK.
• Ability to travel up to 10%.
• Experience in utility, critical infrastructure, or large enterprise supply chain environments.
• Technical documentation and project management skills.
• Ability to lead cross-functional initiatives to completion.
• Broad experience across IT, security, and privacy domains.
• Ability to provide technical leadership and subject matter expertise.

Nice to Have: AI Experience

• Experience applying AI, automation, or analytics tools to cybersecurity, risk management, or supplier assessments.
• Familiarity with AI governance, responsible AI, data protection, and emerging AI security risks.
• Ability to evaluate AI-enabled vendor capabilities and communicate related risks.