Cybersecurity Governance & Risk Analyst or Sr. Cybersecurity Governance & Risk Analyst

About the role

More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits. The Cybersecurity Governance & Risk Analyst is the second level of the classification hierarchy. Employees at this level solve problems, in single areas of specialization, with general supervision. Incumbents are expected to develop skills, and the ability to work with greater independence. They have knowledge of fundamental concepts and procedures. The Sr. Cybersecurity Governance & Risk Analyst will be expected to manage work in multiple governance and risk areas with minimal supervision. The individual will be expected to have the ability to plan, design, and implement a cybersecurity risk and governance program and to work independently, with limited guidance. The individual is expected to be fully competent in the use of cyber risk and governance concepts and procedures, and demonstrate critical thinking skills to identify problems, develop solutions, and take actions to resolve or improve. The individual must have the capability to lead efforts with other team members. The individual will have working knowledge of governance and cybersecurity risk.

Responsibilities

• Demonstrates working knowledge of IT and Cybersecurity policy, standards, processes, controls and functional areas
• Competent in the use of IT and Cybersecurity tools, procedures, and research capabilities
• Monitor and evaluate the effectiveness of the enterprise's cybersecurity safeguards to ensure they provide the intended level of protection.
• Perform or assist in security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in risk mitigation strategy.
• Perform or assist in cyber defense trend analysis and reporting
• Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation
• Assess or assist in the assessment in the effectiveness of security controls
• Collaborate with Cybersecurity leadership and architects to make sure security technologies, processes, and people align with Duke’s strategic plan and budget.
• Continually monitor and support security solutions including architecture and technologies and improve the architecture to meet performance and risk management objectives
• Carries out individual work assignments of