Associate Cybersecurity Analyst, GRC

CenterPoint Energy and its predecessor companies have been in business for more than 150 years.Our Vision: Our vision is to become the most admired utility in the United States through the execution of our long-term growth strategy. We have an unwavering commitment to safely and reliably deliver electricity and natural gas to millions of people.Our Commitment: CenterPoint Energy is committed to creating an inclusive work environment where business results are achieved through the skills, abilities and talents of our diverse workforce.At CenterPoint Energy, individuals are respected for their contributions toward our company objectives. We strive for an inclusive work environment across all levels that is reflective of the available workforce in the communities we serve.Job SummaryAs the Associate Cybersecurity Analyst, GRC, you will be an integral member of the Governance, Risk and Compliance team within the Cybersecurity Department. The Associate Cybersecurity Analyst is primarily responsible for development and maturity of the elements of the GRC function including the following activities:Essential Functions• Development of risk and compliance strategies and create, improve, and monitor company’s cybersecurity controls.• This role will provide high quality cybersecurity and risk management consulting to CenterPoint Energy business leaders and organizations.• Implement a risk-based approach when evaluating organization technology requirements including hardware and software apart of the governance review process.• Responsible for development of compliance activities in response to governance review process.• Partner with internal and external resources to gather data and develop action plans to help drive and achieve results for technology related assessment findings.• Develops and maintains policies, procedures, baselines, and standards working closely with other peers and managers within IT and across the business.• Review vendor’s cybersecurity documents (such as a SIG or CAIQ questionnaire, vendor SOC2 Type II, etc.)• Ensures compliance with government, company, and departmental regulations, policies, and procedures.• Promotes productivity and teamwork in assigned area with open communication, timely decision making, and use of personal leadership skills to set high standards of performance while providing the direction necessary to achieve that performance.• Develop “Trusted Advisor” relationship with business leaders, to understand business and technical risks, and to provide sound risk management guidance.• Identification of new or emerging risks and develop mitigation plans.• Provide technical leadership and security subject matter expertise around a wide range of technologies and business initiatives.• Working knowledge of Microsoft Office (Word, PowerPoint, and Excel) and performing data analysis.Education Description• Bachelor's Degree in a business or technical discipline from an accredited college or university is required.Experience• A minimum of one (1) year experience in cybersecurity, security auditing, or relevant IT role working with cybersecurity concepts and tools is required.• Experience in data processing and analytics preferred.• CISSP, CRISC, or other relevant certifications preferred.• In-depth knowledge and experience in technology risk assessments and risk management preferred.• Demonstrated program and project management planning/execution skills.• Experience working with common information security standards, such as NIST Cybersecurity Framework (NIST) preferred.Physical Requirements• Able to communicate either written and verbal communications either in person or through technical equipment such as telephone.• Able to demonstrate and apply the manual dexterity to operate a personal computer and common office equipment.• Able to sit, stand or walk for long periods of time.• Able to exert up to 10 pounds of force occasionally, and/or a minimal amount of force frequently to lift, carry, push, pull, or otherwise move objects.Working Conditions• Required to participate in CenterPoint Energy's Emergency Operation Plan (EOP).We want you to knowBeing a part of the CenterPoint Energy team is more than a career alone. It's an opportunity to make a positive impact. You will be an integral part of enabling everyday life and the pursuit of possibilities for the customers we serve and the communities we share. The vital services we provide are at the core of making our world work, and by sharing your energy with us, we'll create a better tomorrow together.Diversity, Equity and InclusionCenterPoint Energy is committed to creating an inclusive work environment where business results are achieved through the skills, abilities and talents of our diverse workforce.At CenterPoint Energy, individuals are respected for their contributions toward our company objectives. We strive for an inclusive work environment across all levels that is reflective of the available workforce in the communities we serve.What We Bring To You• Competitive pay• Paid training• Benefits eligibility begins on your first day• Transit subsidies• Flexible work schedule, paid holidays and paid time off• Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston• Professional growth and development programs including tuition reimbursement• 401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contributionJob Type: Full TimePosting Start Date: 09/18/2024Posting End Date: 10/02/2024This contractor and subcontractor shall abide by the requirements of 41 CFR• * 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability.