Senior Information Security Controls Analyst

As MISO's Senior Information Security Controls Analyst, you'll have a direct and lasting impact on the strength, resilience, and maturity of the organization's security program by shaping how security controls are designed, implemented, and optimized. Your work will influence enterprise-wide risk reduction, ensuring critical security objectives are met while continuously improving how the organization identifies and manages cyber risk. By partnering closely with control owners, Internal Audit, Regulatory Compliance, IT, and business teams, you'll help embed security into everyday processes and initiatives. You'll elevate cybersecurity awareness, inform data-driven decisions through meaningful metrics, and help the organization's security strategy in response to evolving threats and regulatory expectations.

The responsibilities as our Senior Information Security Controls Analyst include:

• Design, implement, and continuously enhance the cybersecurity controls framework, ensuring alignment with industry standards, best practices, and regulatory requirements.
• Assess and manage cyber risk by evaluating the effectiveness of security controls, conducting risk assessments, identifying vulnerabilities, and recommending appropriate mitigation strategies.
• Partner cross-functionally with IT, Regulatory Compliance, and business teams to integrate security controls into enterprise processes and systems, serving as a trusted cybersecurity subject matter expert.
• Monitor, report, and communicate security performance by developing metrics and dashboards, tracking control effectiveness, and staying current on emerging threats, trends, and regulatory changes.
• Provide best practice guidance to IT Security control owners to help them maintain their controls and prepare for audits.

In one year, you'll know you are successful if:

• Your impact on revising/improving our Risk and Control Matrices is clear and visible.
• You are able to take point on risk and controls projects with other teams with little or no guidance.
• You have built strong stakeholder relationships with our risk and control owners.

What we are looking for:

• Bachelor's degree in Information Systems Management, Information Technology, Cybersecurity or related field.
• A minimum of five years of experience in information security risk and compliance with deep knowledge of risks and controls.
• Strong knowledge of cybersecurity frameworks and applying NIST CSF, NIST 800-53, and NERC CIP standards, with hands-on experience conducting security control assessments and implementing risk management methodologies.
• Experience implementing and maturing security programs through the effective application of security controls.

Appropriate level will be determined based upon experience and knowledge.

Transformative innovation is happening in the electric industry, from digitalizing homes and distributed resources to renewable energy and an ever-changing grid. MISO manages the electricity superhighway in the Central U.S. and through use of groundbreaking research and advanced technology, our highly skilled employees ensure power flows reliably to 45 million Americans. Operating the electricity grid, running a robust energy market, planning for a bright future - it's what our immensely hardworking and dedicated team does every day.

The base salary compensation range being offered for this role is $105,000 - $130,000 USD annually. Base salary range for this position is included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, and qualifications/experience.

Position is also eligible for an annual bonus if individual performance and company objectives are met. At MISO we offer a comprehensive benefits package, including 401k, vacation, sick and safe time, available on your first day of employment.

#DiscoverMISO #MISOCareers #lifeatMISO #weareMISO

MISO, What We Do

#LI-ONSITE
#LI-JH1

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.