Senior Cybersecurity Solution Analyst ensuring resilience of supply chains against cyber threats at PG&E. Lead assessments and improve cybersecurity posture while collaborating with various stakeholders.
Responsibilities
Lead and execute strategic supply chain cybersecurity risk assessments, audits, and verification activities for third-party vendors and partners.
Evaluate supply chain risk and collaborate with business units and third parties throughout the assessment lifecycle, ensuring comprehensive risk identification, documentation, and mitigation.
Develop and maintain supply chain security metrics, documentation, and reporting for leadership and operational teams.
Validate that security controls are operating effectively across the supply chain, interpreting evidence and test results to inform risk decisions.
Develop and refine control test procedures, analytical tools, and vulnerability testing methods tailored to supply chain environments.
Partner with procurement, legal, and compliance teams to integrate cybersecurity requirements into supplier contracts and onboarding processes.
Support the review and modification of supply chain security controls as business needs and threats evolve.
Maintain situational awareness of emerging supply chain threats, vulnerabilities, and industry best practices.
Foster partnerships with business owners and operational stakeholders to address control deficiencies and enhance supply chain security posture.
Perform other tasks as needed to ensure the effectiveness of the supply chain risk management program.
Requirements
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field or equivalent experience
Utility industry experience
Experience in IT-Information Technology, 3 years IT-Information Technology Security certification
Masters Degree in Computer Science or equivalent experience (Desired)
Utility industry experience 5+ years of experience in IT security, risk management, or supply chain cybersecurity.
Strong knowledge of cybersecurity frameworks and standards (e.g., NIST, ISO, etc.).
Excellent analytical, communication, and stakeholder engagement skills.
Relevant certifications (e.g., CISSP, CISM, CRISC, CCSK) are highly desirable.
Ability to travel up to 10%.
Experience in utility, critical infrastructure, or large enterprise supply chain environments.
Technical documentation and project management skills.
Ability to lead cross-functional teams and drive initiatives to completion.
Extensive IT, security, and privacy skills with versatile experience.
Offers technical leadership and acts as a senior-level subject matter expert within their area(s) of expertise.
Customer Support Engineer providing technical support for mobile device security solutions. Responsible for ensuring customer satisfaction through collaboration with product and engineering teams.
Commercial Sales Executive responsible for promoting and selling Johnson Controls Security services in assigned territory. Securing profitable sales while ensuring customer retention and satisfaction.
Senior AppSec Engineer optimizing application security controls in Flutter's development ecosystem. Managing SAST/SCA tools and conducting vulnerability analyses in a hybrid work environment.
Senior Lead Information Security Office Consultant at Capital One, consulting on initiatives to enhance Information Security. Collaborating with technology teams to manage cyber security risks and ensure data protection.
Stage QSE en sécurité pour réviser le Document Unique d’Évaluation des Risques Professionnels. Accompagnement du Responsable QSE sur divers projets structurants.
Senior Security Data Scientist developing innovative AI solutions for security challenges at Desjardins Group. Collaborating on data analysis and monitoring initiatives to enhance security posture.
Cybersecurity Manager leading corporate - level cybersecurity strategy in hybrid DoW and commercial sectors. Responsible for securing space systems and managing risk across various platforms.
Program Security Officer overseeing security operations for T2S Solutions supporting classified satellite and mission operations. Managing compliance with DoD and Intelligence Community security requirements, enabling effective operations.
On Call Security Officer ensuring campus safety at Whitman College by patrolling and managing emergency situations. Temporary role requiring flexibility for night and weekend shifts.
Cyber Security Engineer at TechSeed, working on security solutions within connected ecosystems in Göteborg. Collaborating with clients on secure development frameworks and practices.