*** | SUPPLEMENTAL LABOR MANAGEMENT OFFICE

ADDITIONAL PROCUREMENT INFORMATION (API)

Title & Level

Business Systems Analyst 2

Work Group Location

Vancouver, WA

Specialty

Compliance, Change & Configuration Management

Offsite Work Eligibility*

Remote Work Eligible - Must live in BPA's service territory of WA, OR, ID, MT. Official Duty Station is the home address.**

Organization

JSP

Number of Days Onsite

0 days per Week

Hours

Full-Time, up to 40 hours

Additional Information

Telework full-time, days onsite as required for meetings/training.

Overtime

10% anticipated

On-Call

No

Travel

Up to 5% for meetings/training

FN Status

NOT open to Foreign Nationals

* Current telework, remote work and onsite support is based on BPA's business needs and is subject to change or termination at any time.

** Assignments with the "Remote" Designation must reside in WA, OR, ID or MT. Case-by-case exceptions may apply only when in the best interest of BPA.

OVERVIEW

Assignment

This contract Business Systems Analyst 2 assignment will support ***'s (BPA's) OT Cybersecurity Program Management & Compliance (JSP) organization. OT Cybersecurity Program Management Mgmt & Compliance is responsible for providing centralized program management, reliability standards owner, and program support services for Field Compliance and Security, Asset Management, Business Continuity, Vulnerability Management, Change and Configuration Management, and Security Management Programs.

This assignment will serve as primary analyst for the Change and Configuration Management team. The Change and Configuration Management Team identifies, controls, and documents changes to the hardware, software (third-party and BPA executables), and database schemas for all Control Center information systems that reside in production and/or on production networks. These teams work closely with one another supporting OT's Change and Configuration Management (CCM) Program, with projects that often overlap and complement.

Organization

JSP operates with a high level of collaboration and transparency. While work is guided by a structured compliance calendar, team members must remain agile to successfully manage emergent, high-priority tasks. This assignment provides an excellent opportunity to gain deep insight into the strict regulatory requirements governing Federal Critical Assets. The ideal candidate is highly adaptable to changing priorities. This assignment is primarily sedentary.

ASSIGNMENT RESPONSIBILITIES

Note: All official drafts, documents and recommendations, as listed below, must be reviewed, finalized and approved / accepted by appropriate BPA manager or other federal personnel with the authority to do so.

General

These responsibilities are performed by both teams / areas of focus; some duties will be performed by collaboration of the two teams.

Perform BPA management-approved processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements.

Provide quality data management and stewardship. Maintain filing system(s), files, emails and records in accordance with compliance requirements. File and disperse documents/letters only to appropriate personnel. Maintain all official records in accordance with the Information Governance & Lifecycle Management (IGLM) standards and procedures. Validate official records are accurately maintained for auditing purposes.

With federal employee oversight, perform review and verification of Control Center (CC) and other applicable GSS compliance with regulations from FISMA, DOE, WECC, NERC, and FERC; as well as performing audit preparation for the aforementioned regulatory bodies and Internal (CG) audits; and Self-Certification data calls.

Participate in improvement efforts, providing recommendations and hands-on assistance with position-related quality, compliance or efficiency improvements.

Validate TTL items are currently modeled correctly in the ChangeGear (CMDB) database; alert SME or BPA manager of any issues or concerns.

Maintain a high-level overview of the complex inter-connected data systems that make up the Change and Configuration Management (CCM) Program. (TripWire, SolarWinds, AssetDB, ChangeGear, CMS, etc.).

Attend meetings, conferences, and seminars to support the customer needs as they related to BPA's CCM Program

IT Change Management

Monitor the Request for Change (RFC) Queue; verify pre and post testing has been performed by the appropriate Resource Managers (RM).

Review specifications, verifying that all essential requirements are documented; alert applicable SME or BPA manager of results or any issues / concern; make recommendations for corrections / changes.

Review the logical top-level design for applications and information systems (including test plans and procedures); provide results, concerns and/or recommendations to BPA manager.

Collaborate with other IT CM Specialists to share best practices, provide recommendations and assistance on critical needs, and coordinate Transmission-wide initiatives.

Identify and recommend training needs and include major areas of uncertainty in approach, methodology, or interpretation and evaluation processes resulting from such elements as continuing changes in program, technological developments, unknown phenomena, or conflicting requirements.

Support the program presentations, in-house and client training, and functional education; arrange, conduct and facilitate management-approved presentations and training sessions.

Develop and present recommendations and supporting analysis for management decisions.

Prepare technical reports, documents, studies, and system documentation as required.

Confer with system users to document and resolve existing system issues and problems.

Provide back-up support and workload assistance for the group's Process & Controls Support Team.

Support configuration change management efforts.

System modeling and maintain technical configuration baseline documentation

Detect and correct configuration baseline errors

Assist in defining, developing and documenting of new processes and procedures as required

Support process and procedure roll-out

Provide support for both the manual and automated software patch program

Track the Request for Change (RFC) related to each mitigation plan and report status to appropriate system owner.

Assist BPA management with developing and documenting system processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements.

Support the development of necessary documentation to support reporting and audit requirements.

Provide quality assurance for organization to verify compliance to regulatory standards and guidelines.

Provide support, including gathering & formatting information/data, to NERC annual certification process, WECC audit, and any other spot audit or compliance data request.

Assist with data stewardship for the configuration management program.

Attend meetings to support the customer needs. Attendance assists in maintaining currency of technical, procedural and acquisition knowledge.

REQUIREMENTS

Education & Corresponding Experience (required on matrix)

An Associate's or Bachelor's degree in Computer/Information Technology, Business Systems, Engineering or a directly-related technical field is preferred.

With an applicable Associates degree, 7 years of experience is required.

With an applicable Bachelor's degree, 5 years of experience is required.

Without an applicable degree, 9 years of experience is required.

Experience should include demonstrated analyst work experience in Computer/Information Technology, Business Systems and requirements engineering, operations management or other closely related field.

Required Technical Skills & Experience (required on matrix)

3 years' experience working with the following:

Configuration Change management concepts and practices for secure/reliable technology systems

Compliance standards and best practices frameworks as applied to systems development and program management

Process and procedure development

1 year experience in the use of configuration change management tools/systems

1 year previous compliance and/or audit support experience

Preferred Skills & Experience (optional on matrix)

Experience in any aspect of the software development lifecycle for a utility environment

Experience with the set-up, configuration or oversight of change and/or configuration management tools

Experience implementing NIST/FISMA standards/guidelines

Experience with applying the concepts of ITIL v3 or later, or similar technology management frameworks

Additional Requirements (not required on matrix)

Valid U.S. Driver's License is required.

Other Assignment Considerations

Selectee will be expected to complete and maintain North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) certifications for secure locations and to possibly act as an escort as required.

Appendices

The following appendices apply to this assignment and may be downloaded from the Fieldglass Reference Library:

Offsite Work

Training Expectations (Worker is expected to keep current on the latest technologies and skills required for the assignment.)

Attendance at all conferences, workshops, training, etc. must be pre-approved by SLMO. Requests will be reviewed on a case-by-case basis. Approval is subject to the most current guidance provided to SLMO by BPA or DOE and is subject to change at any time. SLMO reserves the right to negotiate attendance on billable/non-billable hours and reimbursement of travel costs with the supplier. Reimbursable travel costs must adhere to the Federal Travel Regulations and be submitted via an expense sheet in Fieldglass.