Compliance Analyst

Come join our team! At Unlimited Technology, we are committed to our company's core values of Passion, Collaboration, Innovation and Adaptability. With offices throughout the United States, we are a premier cyber and physical security specialty contractor, and we are growing at a rapid pace. We have a wide range of talented and experienced individuals that deliver cutting edge technology solutions to meet our customers’ ever-changing needs. We secure the facilities and networks of the world’s leading brands and critical infrastructure and are recognized leaders in the physical and IT security, cyber, and managed services industries. UT offers a rewarding career, great benefits, and the chance to learn and work with ground-breaking technology and premier clients.

Job Summary  

This position provides operational leadership and support across the Networks business to support the execution of the information security roadmap while ensuring a secure and stable production system environment.  This position will lead the efforts to balance real world risks with business drivers such as reliability, speed, agility, flexibility, and performance. The role assures maintenance, support, and system monitoring of infrastructure assets across Networks. 

Responsibilities  

• Support the Manager of Compliance Operations to assure a stable and secure production environment for Networks. 
• Evaluate monthly operating system patches for applicability and advising/assuring that patches are deployed by the Infrastructure team.  
• Review vulnerability scans and work with application subject matter experts and the Infrastructure team to remediate identified security vulnerabilities. 
• Work with application subject matter experts to assure the periodic evaluation of system patches and upgrades are completed. 
• Assure newly deployed network infrastructure, server operating system, application systems are implemented in compliance with documented policies and procedures including system hardening and baseline scanning. 
• Define and compile data and metrics to provide reportable information to communicate the status of patching, vulnerability remediation, system monitoring, etc. 
• Work with application subject matter experts and Infrastructure team to assure the system monitoring of infrastructure assets across Networks. 
• Develop and maintain system monitoring alert run books to provide first level response and escalation procedures.    
• Coordinate technical design/review activities with various segments and corporate groups; to engage Cybersecurity, Risk & Governance, Enterprise Architecture and Operational Compliance at appropriate stages in the project.  
• Continuous process improvement activities as required to align with corporate policies.  
• Complete assigned duties/task as needed.  

Skills and Requirements   

JOB REQUIREMENTS:  

Education and Experience Required:  

• Master’s Degree in Engineering, Computer Science, or technical related degree with a minimum of 4+ years’ of related equivalent work experience or  
• Bachelor’s Degree in Engineering, Computer Science, or technical related degree with a minimum of 7+ years’ of related equivalent work experience or  
• Associate Degree in Engineering, Computer Science, or technical related degree with a minimum of 10+ years’ related equivalent work experience.  
• Working knowledge of networks and networking equipment. 
• Working knowledge of operating systems and server applications. 
• Working knowledge of virtual environments (VMware & Others).  

Skills/ Abilities:  

• Strong communication and administration skills related to technology, both IT and OT.  
• Strong understanding of system engineering and integration background for advanced systems and networking technologies.  
• Strong understanding of current and future state of cyberspace.  Understanding with strong desire to learn.  
• Intermediate to advanced expertise in MS Excel to correlate data and produce reports. 
• Intermediate to advanced expertise in scripting languages such as MS PowerShell, VMware PowerCLI, Python, Perl, etc. to automate repetitive tasks and improve reporting accuracy. 

Desired Skills / Abilities:  

• Knowledge of federal government cybersecurity activities and practices  
• Experience in federal or state regulatory environments  
• Experience in federal cybersecurity agencies and environments  
• Experience in a utility environment  
• Experience with NERC-CIP, NIST CSF, MITRE ATT&CK, and CIS Benchmarks 
• Experience participating in regulatory audits 
• Certified Information Systems Security Professional (CISSP)  
• Project Management  
• Change Management  
• Incident / Issue Management 
• Interpersonal Skills  
• Communications / Influencing  
• Negotiation / Dispute Resolution  
• Ability to develop self and learn new information quickly  
• Ability to be onsite 5 days a week in Rochester, NY, Orange, CT or Augusta, ME with no relocation offered. 

Pay Range $110,000—$120,000 USD

Benefits

• Health, dental, and vision coverage
• Life insurance
• 401 (k) w/company match 100% up to 3% and an additional 50% match of 2%
• Paid time off 
• 11 Paid Holidays

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, sex, age, national origin, disability, Veteran status, or any other category protected by federal, state, or local laws.