Associate Cyber Compliance Analyst

Job Summary

Dominion Energy is on the front lines of the cyber war that is underway in the world right now. Strong cyber security is essential to keeping the light on, staying warm in the winter, and to the reputation and trust we’ve built over the years with our customers and shareholders. Strong cyber security at Dominion Energy is critical to the defense of our nation. As the power company to the Pentagon and many of the internet’s data centers with services in 16 states, a single breach could have catastrophic consequences including the loss of life and the disruption of society as we know it. We take cyber security and compliance with cyber regulations seriously and are looking for like-minded interesting independent thinkers and doers. If you’re that type of person and want to help shape the culture of a forward-looking company that’s proud of its rich legacy, then read on!

Cyber Security – Compliance is Dominion Energy’s team of Information Technology (IT) internal control experts. By providing guidance and training, assisting IT to meet obligations under the Sarbanes-Oxley Act (SOX), partnering with Accounting Controls and with auditors during internal and external IT audits (internal and external) of IT, our team ensures Dominion Energy maintains a first in class IT SOX Compliance Program. This role assists with maintaining the cyber regulatory compliance program for processes, applications and systems across business units. Leveraging cyber security best practices and detailed understanding of cyber regulatory requirements, this role provides guidance as to how compliance is achieved, governance and oversight to the entire program, technical guidance, evaluation of technical procedures. We are an integral part of Dominion Energy’s efforts to achieve and maintain compliance; minimize audit findings; implement changes; and meet or exceed regulatory requirements.

Specific responsibilities include:

• Serve as an advisor to process owners across the IT organization on best practices for SOX, recommend opportunities for improvements to existing processes and assist in designing/updating the SOX process documentation for new system implementations.
• Key role assessing risks, identifying control design and testing improvement opportunities, and partnering with IT to provide recommendations for control enhancements.
• Liaise with IT, Accounting Control, and business groups.
• Analyze, design, and advise on the implementation of control framework for acquired companies.
• Manage, perform, and maintain annual risk reassessments to facilitate current IT control documents.
• Evaluate control issues and facilitate root cause analysis, risk impact statements, and remediation action plan responses to IT management and auditors.
• Manage frequent, ad hoc requests from IT for advice and assistance regarding controls and compliance.
• Coordinate with internal and external auditors to ensure the SOX compliance program meets expectations of approach, scope, timing, and control assessments.
• Train IT process and control owners on their SOX responsibilities
• Perform daily oversight activities to confirm compliance with policies and procedures.
• Use time wisely by prioritizing tasks according to risk and demonstrate ability to manage time, working independently, and facilitating a team environment.
• Perform other duties as necessary.

23261

Required Knowledge, Skills, Abilities & Experience

The knowledge, skills, abilities and experience required for entry into this job include the following:

• 0-2 years of cyber or IT audit, compliance, or technology experience. IT SOX experience is highly preferred. (Note: A Master's degree will count as one year of experience).
• Ability to lead meetings and small initiatives with minimal supervision.
• Familiarity with applying technical internal controls or audit knowledge in one or more of the following areas: System Development Lifecycle procedures, IT Security Administration, IT operations, application reviews, SOC 1 reviews, or IT control reviews.
• Familiarity with risk control frameworks (COBIT, COSO, etc.)
• Excellent oral and written communication skills to effectively communicate complex information across various levels and areas of Dominion Energy.
• A continuous improvement mindset with experience optimizing existing processes and possess assessment and process-oriented background.
• Demonstrated ability to adapt in a dynamic environment.
• Ability to develop operational procedures.
• General understanding of IT Technology and Accounting Processes.
• General understanding of cyber security best practices.
• Strong attention to detail.
• Ability to track tasks through completion providing status reports and monitoring for impediments.
• CISA, CIA, or similar certification is preferred but not required.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education:

Bachelor

Preferred Discipline(s): Computer Science; Accounting; Information Systems; Information Systems Security; Information Technology

Other disciplines may be substituted for the preferred discipline(s) listed above.

Licenses, Certifications, or Quals Description

Working Conditions

Other Working Conditions

Test Description

Not Testing Required