Sr. Security Analyst I (II)

Flexible Work Arrangement: Hybrid

The Sr. Security Analyst is responsible for managing all technology that is managed by the Identity and Access Management department. In support of PJM's Vision and Mission, the Sr. Security Analyst will work with the Manager, Identity and Access Management to develop, communicate and implement, and operationally support effective strategies that support short, mid- and long-term growth objectives that affect the continual operation and development of PJM's identity and access management security and compliance objectives.Essential Functions:

• Reports to Manager, Identity & Access Management for work assignments and directly supports the manager in accomplishing both day-to-day operations and project level responsibilities as assigned
• Team lead for, and member of, the Identity and Access Management Support Team (IAM Support). The IAM Support team develops and operationally supports all technology that supports the identity and access management platform components including but not limited to compliance, identity life-cycle, user provisioning, and identity intelligence.
• Develops and maintains complex reports at the request of all end users of the Identity and Access Management platform
• Regularly performs analysis of IAM Support team processes and IAM system technologies for ways to improve security posture, end user experience, process and system efficiency, and compliance capability
• Participates in the analysis and development of documentation, projects, and emerging technology to improve security and compliance at PJM
• Develops and documents process and system improvements
• Documents operational procedures and training for use by IAM support team and end users of the IAM system technologies
• Develops and maintains quality metrics for operational and project areas within the IAM Support team
• Analyzes and develops reports for data requests from regulatory agencies such as FERC, NERC and RFC, as well as internal audit and review bodies
• Participates in audits by outside agencies
• Is responsible for assisting department staff and manager on assigned projects, including integration of cross-functional issues to resolve complex problems
• Applies knowledge, skills and abilities to implement a process or procedure, timely and professionally.
• Has a thorough understanding of NERC CIP standard requirements owned by the Identity and Access Management Department and all compliance work performed by the department, and is able to apply that knowledge to develop and operate processes that support these requirements.
• Builds and develops strong relationships with ITS, Security and Human Resource personnel by providing superior customer support as demonstrated by clearly owning, resolving and communicating issues and problems; being responsive to needs, requirements, and deadlines; and generally promoting goodwill in a professional and trust-building manner.
• Other duties as assigned by manager

• BS in Information Systems, Business or equivalent work experience
• Experience with identity management practices, focusing on access management and governance
• Experience in customer service/support
• Experience using effective verbal and written communications skills
• Experience developing policies, procedures, standards or manuals
• Experience documenting and improving business processes
• Ability to use Microsoft Office Suite (MS-Word, MS-Excel and MS-PowerPoint)
• Ability to work in a team environment as a team member or as team leader
• Ability to work independently and to train, guide or assist others to perform complex assignments

• MS in Information Systems
• Experience with PJM operations, markets, and planning functions
• Experience with DBMS concepts (including SQL queries, tables, views, DB links, etc.)
• Experience with XML technologies, and/or a working knowledge of ontologies
• Experience with SOA, service-oriented concepts and web services (SOAP-based and RESTful)
• Experience with application architectural concepts and design patterns
• Experience using Agile development methodologies such as test driven development, behavior-driven development, Extreme Programming (XP), etc.
• Ability to research, identify, and evaluate new and emerging technologies and recommend strategic initiatives
• Experience with Java-based web development frameworks and technologies including JSF (PrimeFaces or Rich Faces), Struts 2, Spring MVC/WebFlow and component technologies including HTML, JSON/Ajax, CSS and XML