Business Analyst - Cybersecurity Compliance
Bonneville Power Administration (Contract)
Vancouver, Wa
Cybersecurity Compliance-Involvement in WECC audits and annual self-certification to verify the Field’s (devices located at substations) compliance as well as network equipment for an intranet between field sites (FIN).-Learn and keep up to date with NERC CIP standards.-Educate self on FISMA and use CIP/FISMA crosswalk to begin implementing FISMA regulations at field sites.-Write narratives to address each applicable CIP standard and cite supporting evidence.-Produce… Show more Cybersecurity Compliance-Involvement in WECC audits and annual self-certification to verify the Field’s (devices located at substations) compliance as well as network equipment for an intranet between field sites (FIN).-Learn and keep up to date with NERC CIP standards.-Educate self on FISMA and use CIP/FISMA crosswalk to begin implementing FISMA regulations at field sites.-Write narratives to address each applicable CIP standard and cite supporting evidence.-Produce supporting artifacts and evidence that are cited in the narratives to demonstrate compliance.-Facilitate vulnerability assessments to provide compliance documentation or determine remediation steps.-Review device information to determine applicable BES cybersecurity associated system.-Follow interdepartmental process to create work orders to fulfill compliance obligations.-Collaborate with other organizations to update databases for equipment changes.-Track vulnerability assessments, firmware tracker, and ensure proper patching is complete.Process Improvement and Documentation-Document and manage data associated with projects. Disseminating or creating access to stakeholders as needed.-Develop and maintain process documentation for the group; including task specific instructions and process diagrams.-Develop and present instructional documentation to educate users on business processes and requirements.-Provide educational presentations to train others on existing processes internally and externally.-Utilize PowerBI to transform data into meaningful information.-Design forms to collect data and utilize Access and SharePoint lists to manage the data and create efficient workflow. -Initiate Gap analysis and process mapping to advocate process reengineering. -Advocate for cross functional meetings to collaborate process revisions working toward streamlining. -Develop change management tactics, conduct stakeholder analysis and impact assessments for departmental processes. Show less