> Markdown version of [/jobs/ext/1599945-analyst-ii-information-cyber-security](https://www.wearedevelopers.com/jobs/ext/1599945-analyst-ii-information-cyber-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Analyst II, Information & Cyber Security - **Company:** Invenergy LLC - **Location:** Chicago, IL, United States - **Experience:** Experienced - **Salary:** $75,000.0 - $103,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Systems, Information Technology Audit, Workflow Management Systems, Smartsheet, Information Technology, RSA Archer Platform, CIS Benchmarks, Servicenow - **Published:** July 22, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2ffcd810ef6cd6b5 ## About the Role * Bachelor's degree in Cybersecurity, Information Technology, Information Systems, or a related field (or equivalent experience) * 2+ years of professional experience in cybersecurity, IT security, or GRC-related roles * Foundational knowledge of security frameworks (e.g., NIST SP 800-53, ISO 27001, CIS Controls) * Experience supporting audits, compliance programs, or control assessments * Strong analytical and problem-solving skills with attention to detail * Ability to manage multiple priorities and drive tasks to completion * Effective communication skills, with the ability to engage both technical and non-technical stakeholders * Self-starter with a proactive mindset and the ability to work independently and collaboratively across teams, * Experience with regulatory environments such as NERC CIP or other critical infrastructure standards * Experience with GRC platforms or workflow tools (e.g., ServiceNow, Archer, Smartsheet) * Background in consulting, advisory, or IT audit with a focus on cybersecurity or compliance * Experience supporting vendor risk reviews or contract security assessments * Knowledge of cloud security concepts (e.g., Microsoft 365, Azure environments) * Relevant certifications (e.g., Security+, CISA, CRISC, CISSP, or similar) ## Description The Analyst II, Information and Cyber Security supports the execution and continuous improvement of enterprise cybersecurity governance, risk, and compliance (GRC) programs. This role focuses on security controls, policy governance, and regulatory compliance, while also contributing to broader cybersecurity initiatives including risk management, third-party assessments, audit support, and security program operations. This position provides exposure across multiple cybersecurity domains and offers opportunities to contribute to a growing and evolving cybersecurity program aligned with industry and regulatory best practices., * Support the development, maintenance, and enforcement of security policies, standards, and procedures across the enterprise * Maintain and enhance the security controls catalog, aligning to frameworks such as CIS Controls, NERC CIP, NIST CSF, ISO 27001, and other industry best practice frameworks * Perform control assessments to evaluate design and operating effectiveness; identify gaps and track remediation efforts * Develop and maintain dashboards, metrics, and reporting to measure control performance and program maturity * Support NERC CIP compliance activities, including evidence collection, audit coordination, remediation tracking, and follow-up activities * Assist in commissioning and compliance validation efforts, including documentation standardization and process improvement initiatives * Partner with IT and business stakeholders to communicate security requirements and drive compliance across the organization * Contribute to third-party risk management activities, including vendor security assessments, due diligence reviews, and risk documentation * Assist in responding to customer security questionnaires, audits, attestations, and evidence requests * Support contract reviews by identifying cybersecurity requirements and potential risk exposures * Collaborate with enterprise risk management efforts, including risk identification, documentation, tracking, and remediation coordination * Track and report on cybersecurity KPIs and program metrics, identifying trends and opportunities for continuous improvement * Act as a liaison for cybersecurity-related requests, collaborating with teams including Legal, Information Governance, Security Operations, Infrastructure, and Security Architecture * Participate in cross-functional cybersecurity initiatives and provide operational support across cybersecurity programs as needed * Support incident response activities and post-incident reviews in a coordination and documentation role, as required ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)