Cyber Security Analyst PSEG LI -DevSecOps Engineer

This position supports the organization’s cybersecurity governance, risk, and compliance program through governance oversight, policy lifecycle management, standards alignment, risk and control assessments, audit coordination, compliance validation, issue remediation tracking, third-party risk review, and executive reporting and documentation., The Cybersecurity GRC Analyst works closely with IT, Internal Audit, Compliance, Procurement, and business stakeholders to help ensure cybersecurity requirements are defined, documented, assessed, and monitored across the enterprise. This role is responsible for supporting the maintenance of cybersecurity policies and standards, conducting and documenting risk assessments, evaluating control effectiveness, coordinating audit and compliance activities, tracking remediation efforts, and preparing clear reporting for management and leadership., * Support governance oversight activities for the cybersecurity program across the enterprise.

• Maintain and support policy lifecycle management, including the review, update, and communication of cybersecurity policies, standards, procedures, and related documentation.
• Assist with standards alignment to applicable requirements, contractual obligations, and recognized cybersecurity frameworks.
• Perform and document risk and control assessments for systems, applications, vendors, projects, and business processes.
• Identify control gaps, document findings, and support risk treatment planning with business and technical stakeholders.
• Assist with control documentation and control testing to evaluate design and operating effectiveness.
• Provide audit coordination support for internal audits, external audits, and regulatory assessments, including evidence gathering, response tracking, and issue follow-up.
• Support compliance validation activities to confirm required controls, processes, and documentation are in place and operating as intended.
• Support third-party risk review activities, including security questionnaires, documentation review, assessment follow-up, and findings management.
• Maintain risk registers, issue logs, exception records, remediation plans, and supporting documentation.
• Perform issue remediation tracking and follow up with stakeholders to support timely closure of findings, gaps, and action items.
• Prepare executive reporting and documentation related to risk posture, compliance status, audit results, remediation progress, control maturity, and key metrics.
• Support governance committees, risk discussions, and management reporting through accurate and organized documentation.
• Contribute to continuous improvement of GRC processes, templates, reporting, and governance practices., JFrog DevOps Github Tooling Jenkins Cannabis Sonatype Terraform DevSecOps Pipelines Operations Management Automation Kubernetes Artifactory Public Cloud Azure DevOps Prisma Cloud GitLab CI/CD Team Building Secure Coding Code Analysis Cyber Security Cloud Security Microsoft Azure Security Testing Cloud Governance Security Controls Agile Methodology Security Policies Docker (Software) Behavioral Health AWS CloudFormation Container Security DevOps Engineering Security Solutions Workflow Management Penetration Testing Amazon Web Services Enterprise Security Cloud Infrastructure Application Security Code Access Security Continuous Deployment Operational Excellence Continuous Integration Open Source Technology Infrastructure Security Vulnerability Management Permanent Resident Cards Bash (Scripting Language) Cloud-Native Architecture Code Of Federal Regulations Infrastructure as Code (IaC) Python (Programming Language) Software Composition Analysis Cross-Functional Collaboration Software Development Life Cycle Application Programming Interface (API) Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) +0

ServiceNow Reliability Procurement NIST 800-53 Coordinating Communication Due Diligence Risk Analysis ISO/IEC 27001 Cyber Security Computer Science Cyber Governance Internal Auditing Internal Controls External Auditing CompTIA Security+ Behavioral Health Treatment Planning Information Systems Management Reporting Lifecycle Management Operational Excellence Cyber Security Policies Management By Exception Business Risk Management Permanent Resident Cards Verbal Communication Skills Code Of Federal Regulations Continuous Improvement Process NIST Cybersecurity Framework (CSF) Internal Controls Testing And Monitoring Governance Risk Management And Compliance Certified Information Systems Security Professional, * Bachelors degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management or related discipline.

• With four (4) or more years of experience in cybersecurity governance, risk, compliance, IT audit, internal controls, or related field.
• Candidates without a degree who have 8 years of experience in cyber security governance risk and compliance will be considered.
• Proficiency with Cyber GRC technologies (such as ServiceNow, Archer, RSAM, etc.)
• Background supporting governance oversight, policy lifecycle management, and standards alignment activities.
• Track record performing risk and control assessments and documenting findings, recommendations, and remediation actions.
• History of supporting control testing, audit coordination, and compliance validation activities.
• Direct involvement with third-party risk review, vendor assessment support, or related due diligence functions.
• Familiarity with issue remediation tracking, exception management, and reporting processes.
• Advanced analytical, organizational, reporting, and documentation skills.
• Excellent written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.
• Ability to manage multiple priorities, maintain detailed records, and work independently with limited supervision.
• Department of Energy’s regulation 10 CFR 810 is required

Desired

• Working knowledge of cybersecurity frameworks and control standards such as NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls.
• Cybersecurity certification such as Security+, CISSP, CISA

Please Note the Following:

• This position falls under the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) and requires NERC CIP background investigation prior to start., ServiceNow Reliability Procurement NIST 800-53 Coordinating Communication Due Diligence Risk Analysis ISO/IEC 27001 Cyber Security Computer Science Cyber Governance Internal Auditing Internal Controls External Auditing CompTIA Security+ Behavioral Health Treatment Planning Information Systems Management Reporting Lifecycle Management Operational Excellence Cyber Security Policies Management By Exception Business Risk Management Permanent Resident Cards Verbal Communication Skills Code Of Federal Regulations Continuous Improvement Process NIST Cybersecurity Framework (CSF) Internal Controls Testing And Monitoring Governance Risk Management And Compliance

As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits designed to support your total well-being: medical, dental, vision, paternal leave and family leave programs, behavioral health programs, 401(k) with company match, life insurance, tuition reimbursement, and generous paid time off., Some positions at PSEG require access to information covered by the Department of Energy’s regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a “Generally Authorized” destination on the attached list and not also a citizen, national, permanent resident of any country not listed; OR (4) a “Protected Individual” under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3)).

As an employee of PSEG Long Island, you should be aware that during storm/outage restoration efforts, you may be required to perform functions different from normal operations and work extended hours beyond your regular work schedule. You may also be required to work on premise or in an alternate location as directed by the company.

For all roles, PSEGLI’s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. Employees who are hired or transfer into a federally regulated role (including positions covered by USDOT, PHMSA, or NRC regulations) are subject to random drug and alcohol testing, inclusive of marijuana. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and medically, the use of these products are prohibited for employees in federally regulated roles. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for a positive result.

If you are a current PSEG employee and offered an opportunity with PSEG Long Island, you will be treated as a new hire. Please note that as a new hire to the Long Island subsidiary, your benefits will change and generally will be consistent with other similarly situated PSEG Long Island new hires. Similarly, for PSEG Long Island employees who accept job opportunities with PSEG or any of its subsidiaries (other than PSEG Long Island), their benefits will change and generally be consistent with other similarly situated new hires of that company.

We’re one of the country’s largest energy companies, with a vision of powering a future where people use energy more efficiently and it’s safer and delivered more reliably than ever. We’re also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day.

Here, you’ll have the stability and exciting opportunities that come with being a Fortune 500 company - along with a supportive, friendly work environment where your contributions are valued.

We offer a flexible work environment designed to balance employee needs with collaboration and operational excellence. Roles fall into two categories, More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you’re looking for a place where you can build a meaningful career and help power and support our communities, we’d love to welcome you to the team.