IT Cybersecurity Specialist

About the role

Duck River Electric Membership Corporation (DREMC) is a member-owned electric cooperative serving approximately 2,500 square miles across 17 counties in southern middle Tennessee. The cooperative distributes safe, reliable electricity at the lowest possible cost to over 87,000 members across 6,500 miles of line, while promoting economic development and enhancing quality of life. The IT Cybersecurity Specialist is responsible for the protection, monitoring, and continuous improvement of the Cooperative's cybersecurity posture. This position serves as the primary hands-on technical resource for cybersecurity operations, directly implementing and managing security controls that reduce risk, safeguard critical systems and data, and support regulatory, operational, and business requirements.

Responsibilities

• Plan, implement, manage, and continuously improve cybersecurity controls across networks, systems, endpoints, applications, and cloud services.
• Monitor security tools and platforms to identify, investigate, and respond to cybersecurity threats and incidents.
• Administer and support security technologies, including firewalls, endpoint protection, identity and access management, vulnerability scanning, and logging/monitoring solutions.
• Conduct regular risk assessments, vulnerability assessments, and security reviews; coordinate remediation efforts with IT staff and vendors.
• Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security baselines aligned with industry best practices.
• Maintain accurate and current cybersecurity documentation, including incident reports, risk assessments, and security architecture diagrams.
• Support cybersecurity incident response activities, including investigation, containment, recovery, and post-incident analysis.
• Apply and promote cybersecurity frameworks and best practices, including the NIST Cybersecurity Framework and CIS Controls, when implementing and evaluating security controls.
• Support disaster recovery, business continuity, and data protection initiatives from a cybersecurity perspective.
• Evaluate and recommend cybersecurity tools, technologies, and process improvements in alignment with organizational objectives.
• Review proposed technology solutions, projects, and system changes to ensure cybersecurity requirements are properly considered and implemented.
• Communicate cybersecurity risks and recommendations clearly to technical and non-technical stakeholders.
• Develop and support cybersecurity awareness and training initiatives to promote a culture of security throughout the Cooperative.
• Perform special projects as assigned.
• Provide emergency response coverage as needed.

Requirements

Education and Experience: Bachelor's degree from an accredited college or university in computer science, information technology (IT), management information systems (MIS), or a related field and five (5) years of experience as a Cybersecurity Specialist or related role.

Experience in Lieu of Education: Thirteen (13) years of experience as a Cybersecurity Specialist or related role.

Certifications/Licenses: Industry certifications such as CompTIA Security+, ISC2 CISSP, ISACA CISM, EC-Council CEH, or equivalent are preferred. Must possess or be able to obtain a valid Tennessee Driver's License. Must be eligible and remain insured as a driver by the Cooperative's group liability policy for the automotive fleet.

Skills

• Knowledge of current cybersecurity threats, trends, and defensive techniques.
• Strong understanding of network security, endpoint security, identity and access management, and security monitoring concepts.
• Experience with cybersecurity documentation, policies, risk assessments, and vulnerability management.
• Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework.
• Familiarity with LAN, WAN, cloud, and mobile-based systems.
• Ability to analyze security data and respond effectively to incidents.
• Effective oral and written communication skills.
• Ability to prioritize, manage multiple tasks, and meet deadlines.

Physical Requirements

Frequently required to sit for extended periods while working on a computer or reviewing systems data. Regular use of hands and fingers for typing and handling documents or technical tools. Visual acuity required to read and interpret complex spreadsheets, reports, and system dashboards. Must be able to communicate clearly and effectively in person, over the phone, and in written communications. Occasionally required to stand, walk, bend, or lift up to 50 pounds (such as laptops, network hardware, backup batteries). May require extended focus and concentration when analyzing data or configuring systems.

Work Environment

Work is primarily performed in a quiet, professional office environment with standard climate control and lighting. The position requires frequent use of computers, cybersecurity monitoring platforms, network management tools, phones, and office equipment. Occasional meetings with internal departments may take place in person or virtually. Limited travel may be required for training, vendor meetings, or collaboration with other office locations. Work may involve periods of increased pressure during reporting cycles, audits, or system implementation phases.

Benefits

• Group medical, dental, and vision insurance
• Employer-sponsored medical clinic
• Life and long-term disability insurance programs
• Defined benefit retirement and 401K savings plans
• Tuition reimbursement

Pay

Pay Grade: 13 | Exempt (salaried) | No residency requirement