Cybersecurity Solution Analyst, Senior

Full Time
San Francisco, CA
Areas of Interest: Strategic Planning and Policy Development, Vulnerability Assessment and Management
report a problem
Overview

Based in San Francisco, Pacific Gas and Electric Company, a subsidiary of PG&E Corporation (NYSE:PCG), is one of the largest combined natural gas and electric utilities in the United States. And we deliver some of the nation’s cleanest energy to our customers in Northern and Central California. For PG&E, ‘Together, Building a Better California’ is not just a slogan. It’s the very core of our mission and the scale by which we measure our success. We know that the nearly 16 million people who do business with our company count on our more than 24,000 employees for far more than the delivery of utility services. They, along with every citizen of the state we call home, also expect PG&E to help improve their quality of life, the economic vitality of their communities, and the prospect for a better future fueled by clean, safe, reliable and affordable energy.

Pacific Gas and Electric Company is an Affirmative Action and Equal Employment Opportunity employer that actively pursues and hires a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, sex, age, religion, physical or mental disability status, medical condition, protected veteran status, marital status, pregnancy, sexual orientation, gender, gender identity, gender expression, genetic information or any other factor that is not related to the job.

Department Overview

The Cyber security team enables PG&E to achieve its mission by providing governance, oversight, and support of operational resiliency and asset safeguards in a relevant, timely and data-driven manner. 

The team consists of security professionals, each with multiple years of experience in their chosen discipline:

  • Cyber security Risk & Strategy
  • Cyber security Project Management
  • Policy, Compliance Management, Training, & Awareness
  • Risk Monitoring & Incident Management
  • Control Assessment & Verification
  • Business Planning & Control

Working together, we review the current cyber threat landscape and lend our expertise to help the company understand it’s security posture and act on the highest priority risks.

The Cyber security team takes a proactive approach to security by focusing on the cyber risks PG&E faces. Cyber security’s methodology and framework synthesizes current legal, regulatory, and operating mandates with PG&E’s business goals and operations. By taking this information and focusing on the cyber risks unique to individual Lines of Business (LOB), Cyber security helps PG&E’s LOBs make informed decisions about where to invest their resources.

Position Summary

The Cyber security Solution Analyst provides cyber security risk consulting services to the product owners from the lines of business and the project delivery teams to ensure the safe and secure delivery of technologies through the identification, documentation and implementation of security controls and sound cyber security practices, in accordance with organizational standards and processes. This role will engage with project teams and support the delivery of business and operational technologies in one or more assigned lines of business, getting a front-seat view into a real-life version of the Internet of Things.

Although San Francisco, CA, is the headquarters and preferred location, San Ramon, CA, may be considered as an alternate work location.

Qualifications
Minimum:
  • Bachelor’s degree in Computer Science, Information Systems or other related field, or equivalent year work experience
  • 3 years of related experience (IT, critical infrastructure, engineering, intelligence, and/or cyber information security work) 
  • Ability to travel up to 10% to meet the needs of the business

Desired:

  • M.S. or M.B.A. degree in business administration, computer science, or equivalent preferred
  • Knowledge of regulatory requirements 
  • Experience with data protection and/or application security 
  • Experience with Palo Alto, Tripwire, QRadar or other firewall/network/software
  • Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or equivalent 
  • Cyber security best practices and standards (e.g. NIST, ISO, etc.)
  • Experience with Cyber/information security management policies, procedures, regulations and governance processes, Information Systems/Network Security, System Security Analysis, Information Assurance Compliance
  • Knowledge of risk management techniques, technological trends and developments in cyber/information security, systems/software development, engineering, integration, testing and evaluation and operating systems.
  • Understanding of computer networking concepts and protocols, and network security methodologies.
  • Ability to communicate and convey complex IT/OT technical security related concepts to business and technology teams.
  • Ability to influence and work with and across all levels within the business
  • Excellent written and verbal communication skills required
  • Ability to perform complex tasks using established policies, procedures and guidelines as reference
  • Complex problem analysis and decision-making skills
Responsibilities
  • Builds relationships with PG&E’s lines of business to identify, assess, prioritize and mitigate cyber security risks for new technologies.
  • Conducts technology assessments to understand capabilities of required systems or networks.
  • Provides input on security requirements to be included in statements of work and other appropriate procurement documents.
  • Identifies cyber capabilities strategies for technology development based on stakeholder requirements.
  • Performs security reviews and identify gaps in security architecture and design.
  • Identifies necessary security controls to be integrated within the development lifecycle.
  • Translates security controls into technical specifications and guidance to stakeholders to ensure common understanding across the stakeholders and enable adequate implementation.
  • Defines engineering solutions in collaboration with Cyber security Architects and product owners to remediate inherent cyber security risks.
  • Partners with the IT methodology team to recommend and deploy process improvements to ensure that security requirements are incorporated in all technology projects.
  • Provides peer review and support for organizational deliverables.



Share this job:

Pacific Gas and Electric Company

Pacific Gas and Electric Company, incorporated in California in 1905, is one of the largest combination natural gas and electric utilities in the United States. Based in San Francisco, the company is a subsidiary of PG&E Corporation. 

There are approximately 20,000 employees who carry out Pacific Gas and Electric Company's primary business—the transmission and delivery of energy. The company provides natural gas and electric service to approximately 15 million people throughout a 70,000-square-mile service area in northern and central California. 

Fast Facts 
  • Service area stretches from Eureka in the north to Bakersfield in the south, and from the Pacific Ocean in the west to the Sierra Nevada in the east 
  • 141,215 circuit miles of electric distribution lines and 18,616 circuit miles of interconnected transmission lines 
  • 42,141 miles of natural gas distribution pipelines and 6,438 miles of transportation pipelines 
  • 5.1 million electric customer accounts 
  • 4.3 million natural gas customer accounts
Specialties
energy, utility, power, gas, electricity
Visit Pacific Gas and Electric Company's Social Media pages:
Company Industry: Utilities
Company Type: Public Company
Company Size: 10,001+