Senior IT Security Specialist

The New York Independent System Operator (NYISO) manages the efficient flow of electricity on more than 11,000 circuit-miles of high-voltage transmission lines, dispatching power from hundreds of generating units across the state. The New York Independent System Operator (NYISO) applies cutting-edge technology to operating a reliable electricity system, managing competitive markets for wholesale electricity, and planning for the Empire State's energy future.  The NYISO’s Information Technology department invites applications for a full-time Senior IT Security Specialist. The Senior IT Security Specialist provides a wide range of information security services to protect the confidentiality, integrity, and availability of NYISO information and technical environments and to support NYISO’s enterprise security goals and objectives. Responsibilities vary by function, and security operations, threat management, security incident response, security event monitoring and analysis, vulnerability management, engineering and operation of security tools and infrastructure, access, identity & account management, risk management, supply chain cyber risk management, information protection, development and maintenance of security policies, standards, and procedures, and the delivery of effective security awareness training. The Senior IT Security Specialist evaluates existing NYISO security measures, assesses the effectiveness of those measures, and recommends changes that will improve all aspects of NYISO security. The Senior IT Security Specialist is responsible for ensuring compliance with corporate and regulatory standards and plays a key role in ensuring the NYISO’s compliance with cyber risk frameworks and standards. ESSENTIAL DUTIES and RESPONSIBILITIES Designs and manages technologies in support of the NYISO’s Security Operations function; responsible for cyber security architecture, design, system integration, installation, upgrades, and patching, monitoring, system integrity, security, disaster recovery, and performance; develops and maintains technology standards and procedures; leads or participates on project teams and collaborates with application developers and infrastructure peers as necessary; performs backup and restoration procedures; leads audit efforts and ensures compliance with corporate and regulatory standards; mentors and trains junior staff; provides expertise in strategic IT planning; establishes and maintains working relationships with IT partners, business customers, and vendors. Responsible for all parts of the system lifecycle of managed cyber security platforms. Establishes and documents a comprehensive set of expertise for a wide range of security technologies and processes including, but not limited to: Security Information and Event Management (SIEM); Threat Management Platform, Anti-malware prevention and analysis; vulnerability scanners; penetration testing; computer and network forensics tools and processes; secure application coding and scanning; and cyber security incident Architects, designs, and develops security automation to orchestrate security solutions (SOAR) to automate repetitive tasks, and mature monitoring and response Applies broad and deep security expertise to investigate activity, trends, and patterns in NYISO systems, ensuring the security, availability, and integrity of the NYISO’s information assets and technical environments, including energy management systems designated as national critical infrastructure. Will serve as a security thought leader in the Interacts frequently with peers from across the IT organization to develop solutions that ensure the security of IT infrastructure and business applications. Provides guidance on the configuration of security infrastructure to implement robust security measures & controls through technology solutions. Designs IT security architecture, and makes recommendations on infrastructure, including hardware, software, architecture, and systems management. Collaborates with the Security Operations team to ensure security technologies are configured properly to monitor, track, and analyze networks/systems for potential security violations while also assisting in all such potential cyber security Ensures the delivery of all assigned projects, both by representing Enterprise Security on business projects, as well as serving as the lead on Enterprise Security initiatives within area of specialty. May perform additional project duties such as requirements development, project management, and quality Participates as a key member of Cyber Security Incident Response Team by providing subject matter expertise to more junior staff on security concepts and Oversees the collection of metrics and key performance indicators that measure Enterprise Security’s effectiveness, as well as the development of reports and dashboards that communicate security readiness to business leaders. Leverages offensive security techniques and adversarial thinking to proactively identify, validate, and mitigate security weaknesses across applications, infrastructure, and cloud environments. Leads or supports activities such as penetration testing, threat emulation, red teaming, attack surface management, and security control validation to improve the organization's cyber resilience Evaluates emerging technologies, industry trends, and evolving threat landscapes to identify opportunities and risks impacting the NYISO's security posture. Researches, assesses, and provides strategic guidance on next-generation security capabilities and disruptive technologies, including artificial intelligence (AI), machine learning, synthetic media detection, post-quantum cryptography, quantum-safe security standards, and other advancements relevant to critical infrastructure protection. QUALIFICATIONS : Bachelor's Degree (BS) in Information Security, Computer Science, Computer Information Systems, or similar fields. Master