Duke Energy Corporation

Cybersecurity Governance & Risk Analyst or Sr. Cybersecurity Governance & Risk Analyst

Duke Energy Corporation • $95K — $115K *
Charlotte, NC 28269In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Cybersecurity or related field
  • 2 years of related experience for Cybersecurity Governance & Risk Analyst
  • 5 years of related experience for Sr. Cybersecurity Governance & Risk Analyst
  • High School/GED plus 6 years of experience in lieu of degree(s)
  • Knowledge of Cybersecurity frameworks like NIST is preferred

Responsibilities

  • Demonstrate working knowledge of IT and Cybersecurity policies and standards
  • Monitor the effectiveness of cybersecurity safeguards
  • Assist in security reviews and identify gaps
  • Perform trend analysis and reporting on cyber defense
  • Evaluate the effectiveness of security controls
  • Collaborate with Cybersecurity leadership for alignment with strategic goals
  • Provide good customer support for compliance requirements

Benefits

  • Hybrid work model after onboarding with remote and onsite flexibility
  • Collaborative and team-focused work environment
  • Opportunities for skill development and independent work
  • Access to advanced Cybersecurity tools and methodologies
  • Potential for career advancement in a growing field
Full Job Description
The Cybersecurity Governance & Risk Analyst is the second level of the classification hierarchy. Employees at this level solve problems, in single areas of specialization, with general supervision. Incumbents are expected to develop skills, and the ability to work with greater independence. They have knowledge of fundamental concepts and procedures.

The Sr. Cybersecurity Governance & Risk Analyst will be expected to manage work in multiple governance and risk areas with minimal supervision. The individual will be expected to have the ability to plan, design, and implement a cybersecurity risk and governance program and to work independently, with limited guidance. The individual is expected to be fully competent in the use of cyber risk and governance concepts and procedures, and demonstrate critical thinking skills to identify problems, develop solutions, and take actions to resolve or improve. The individual must have the capability to lead efforts with other team members. The individual will have working knowledge of governance and cybersecurity risk.

Responsibilities
  • Demonstrates working knowledge of IT and Cybersecurity policy, standards, processes, controls and functional areas
  • Competent in the use of IT and Cybersecurity tools, procedures, and research capabilities
  • Monitor and evaluate the effectiveness of the enterprise's cybersecurity safeguards to ensure they provide the intended level of protection.
  • Perform or assist in security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in risk mitigation strategy.
  • Perform or assist in cyber defense trend analysis and reporting
  • Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation
  • Assess or assist in the assessment in the effectiveness of security controls
  • Collaborate with Cybersecurity leadership and architects to make sure security technologies, processes, and people align with Duke's strategic plan and budget.
  • Continually monitor and support security solutions including architecture and technologies and improve the architecture to meet performance and risk management objectives
  • Carries out individual work assignments of a less complex nature to meet established work schedules.
  • Receives work assignments and works with review and direction by management or senior analyst.
  • Performs or assists in the performance of technical project work as needed to complete project deliverables.
  • Basic knowledge of IT and Cybersecurity policy, standards, processes, resources and controls.
  • Able to apply process and controls knowledge to meet compliance requirements.
  • Provides good customer support to deliver compliance results to internal and external parties
  • Communicates with customers to understand compliance requirements
  • Communicates problems and resolutions to manager and/or customers


Basic/Required Qualifications for Cybersecurity Governance & Risk Analyst:
  • Bachelors degree in Cybersecurity or related degree
  • In addition to bachelor's degree, 2 years related experience
  • In lieu of bachelor's degree AND 2 years minimum of related work experience listed above, high school diploma/GED AND 6 years minimum of related work experience


Basic/Required Qualifications for Sr. Cybersecurity Governance & Risk Analyst:
  • Bachelor's degree in Cybersecurity or related degree
  • Minimum 5 years Required of Related Work Experience.
  • In lieu of degree(s) listed above, High School/GED AND 9 years related work experience


Desired Qualifications
  • Experience in Cybersecurity, preferably with risk identification and management, audit and compliance, policy development and maintenance, evaluation of control requirements, security and related industry regulatory issues
  • Knowledge in validating the organization against policies/guidelines/procedures/regulations/laws to ensure compliance
  • Knowledge in reviewing service performance reports identifying any significant issues and variances, initiating, where necessary, corrective actions and ensuring that all outstanding issues are followed up
  • Ability to evaluate, analyze, and synthesize large quantities of data (which may be fragmented and contradictory) into high quality, fused targeting/intelligence products.
  • Working knowledge of Cybersecurity frameworks such as NIST
  • Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
  • Able to work effectively with defined direction
  • Demonstrated ability to work independently with supervisory review and direction
  • Excellent listening and communication skills; able to present information in an understandable manner both verbal and written
  • Demonstrated ability to absorb change and continue with positive results
  • Skill in conducting audits or reviews of technical systems.
  • Skill in performing impact/risk assessments.
  • Skill in processing collected data for follow-on analysis.
  • Recognize a possible security violation and take appropriate action to report the incident as required
  • Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs)
  • Provide ongoing optimization and problem-solving support
  • Demonstrates good listening skills and puts forth the effort to understand others points of view. Has the ability to manage confidential information with a high degree of integrity.
  • Responds well to supervisors, is easy to challenge and develop, and is easily coachable. Able to work effectively with defined direction
  • Perform cyber defense trend analysis and reporting.
  • Skill in creating and utilizing mathematical or statistical models.
  • Research current technology to understand capabilities of required system or network.
  • Knowledge of information technology (IT) supply chain security and supply chain risk management policies, requirements, and procedures.
  • ServiceNow or similar asset management database experience
  • Experience creating dashboards in ServiceNow for compliance and cybersecurity monitoring/reporting
  • Knowledge of traditional gas-industry OT devices such as PLCs, RTUs, VFDs, electronic correctors, etc.
  • Direct experience with incident investigation and remediation
  • Demonstrated ability to develop complex processes with multiple stakeholders for isolating/securing OT environments as part of incident response activities
  • Experience tracking and remediating cybersecurity vulnerabilities in operational environments


Working Conditions
  • Hybrid mobility classification - Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees must live within a reasonable commute to their designated Duke Energy facility, not greater than 50 miles one way. Employees are expected to report to their assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular work week.


Travel Requirements
5-15%

Relocation Assistance Provided (as applicable)
No

Represented/Union Position
No

Visa Sponsored Position
No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.

About Duke Energy Corporation

Duke Energy is one of the largest energy holding companies in the United States. Its Electric Utilities and Infrastructure business unit serves approximately 7.5 million customers located in six states in the Southeast and Midwest.

Duke Energy Corporation Careers

Join the dynamic team at Duke Energy Corporation, a leader in sustainable energy, where innovation, leadership, and diversity drive success. As one of the largest electric power holding companies in the United States, there has never been a better time to explore job opportunities with us. Work You’ll Do At Duke Energy, your work will directly contribute to shaping the future of energy across the nation. Our commitment to sustainable, reliable power is matched by our dedication to our team's professional growth and development. Lead in an Environment Focused on Innovation and Sustainability Duke Energy is at the forefront of integrating renewable energy and cutting-edge technology to meet tomorrow's energy needs. Join a team where your innovative ideas can flourish and where you are part of leading the charge toward a cleaner energy future. Transform Your Career with Unmatched Opportunities With a wide range of career paths, from engineering to customer service, Duke Energy offers job opportunities that cater to diverse skills and ambitions. Whether you're seeking an entry-level position or a more senior role, you'll find a culture that supports your career aspirations. Internship Programs and Professional Development Start your career journey through Duke Energy’s internship programs designed to give you real-world experience and insights into the energy sector. Our programs help bridge the gap between academic learning and professional employment, enhancing your resume and preparing you for future hiring opportunities. Be Part of a Great Team Duke Energy’s commitment to diversity and inclusive culture makes it a great place to work. Our team is our strength, and we thrive on the creativity and different perspectives that each member brings. Enjoy benefits that support both your professional and personal life, as you collaborate with talented professionals dedicated to making a difference. Future-Proof Your Career Advance your career with Duke Energy’s extensive training and development programs. From leadership development to technical skills enhancement, we provide the tools you need to succeed. Our commitment to your growth ensures that your career is always moving forward. Explore Discover how Duke Energy is leading the way in renewable energy solutions and how our workforce is pivotal in driving this change. Stay Connected Join Our Team Search open positions that match your skills and interests. We look for passionate, curious, creative, and solution-driven team players. Ready to start your journey with Duke Energy? Prepare your resume, sharpen your interview skills, and join a company that values what you bring to the table. SEARCH DUKE ENERGY JOBS Keep Up to Date Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who work here. READ CAREERS BLOG Job Alert Emails Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Explore the exciting and rewarding opportunities that await at Duke Energy Corporation. By joining Duke Energy, you’re not just getting a job—you’re gaining a career where you can truly make a difference.
Learn more about Duke Energy Corporation
Size
27,605 employees
Market Cap
$79 billion
Industry
Energy & Utilities
Net Income
$1.3 billion
5 Year Trend
+2%
Revenue
$23.8 billion
NASDAQ
DUK
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Duke Energy Corporation

More Information Technology Jobs

Find similar Cybersecurity Governance & Risk Analyst or Sr. Cybersecurity Governance & Risk Analyst jobs:

NationwideCharlotte, NC