Associate / Senior / Cyber Compliance Analyst - SOX

At Dominion Energy we love our jobs.  That’s right.  Love.  Every day we go to work filled with passion to be excellent, to creatively problem solve and to innovate.  These are exciting days for energy companies, and Dominion Energy aims to shape the future of energy in America. We are looking at all of our work with fresh eyes, retooling everything we do, in every part of the company, to operate more sustainably and to deliver energy more reliably than ever.  We are looking for interesting, independent thinkers and doers who can help shape the culture of a forward-looking company that’s proud of its rich legacy. Are you a change agent?  Do you think differently?  Do you want to fall in love with your job? If you answered “yes,” then read on!

 

 

Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity. 



 

 

Job Summary

Dominion Energy is on the front lines of the cyber war that is underway in the world right now.  Strong cyber security is essential to keeping the light on, staying warm in the winter, and to the reputation and trust we’ve built over the years with our customers and shareholders.  Strong cyber security at Dominion Energy is critical to the defense of our nation.  As the power company to the Pentagon and many of the internet’s data centers with services in 16 states, a single breach could have catastrophic consequences including the loss of life and the disruption of society as we know it.  We take cyber security and compliance with cyber regulations seriously and are looking for like-minded interesting independent thinkers and doers.  If you’re that type of person and want to help shape the culture of a forward-looking company that’s proud of its rich legacy, then read on!

Cyber Security – Compliance is Dominion Energy’s team of internal control experts for Cyber Security. By providing guidance and training, assisting IT to meet obligations under the Sarbanes-Oxley Act (SOX), partnering with Accounting Controls and with auditors during internal and external IT audits (internal and external) of IT, our team ensures Dominion Energy maintains a first in class IT SOX Compliance Program. This role assists with maintaining the cyber regulatory compliance program for processes, applications and systems across business units. Leveraging cyber security best practices and detailed understanding of cyber regulatory requirements, this role provides guidance as to how compliance is achieved, governance and oversight to the entire program, technical guidance, evaluation of technical procedures. We are an integral part of Dominion Energy’s efforts to achieve and maintain compliance;  minimize audit findings; implement changes; and meet or exceed regulatory requirements. Specific responsibilities include:

 

• Serve as an advisor to process owners across the IT organization on best practices for SOX, recommend opportunities for improvements to existing processes and assist in designing/updating the SOX process documentation for new system implementations.
• Key role assessing risks, identifying control design and testing improvement opportunities, and partnering with IT to provide recommendations for control enhancements.
• Liaise with IT, Accounting Control, and business groups.
• Analyze, design, and advise on the implementation of control framework for acquired companies.
• Manage, perform, and maintain annual risk reassessments to facilitate current IT control documents.
• Evaluate control issues and facilitate root cause analysis, risk impact statements, and remediation action plan responses to IT management and auditors.
• Manage frequent, ad hoc requests from IT for advice and assistance regarding controls and compliance.
• Coordinate with internal and external auditors to ensure the SOX compliance program meets expectations of approach, scope, timing, and control assessments.
• Train IT process and control owners on their SOX responsibilities
• Perform daily oversight activities to confirm compliance with policies and procedures.
• Use time wisely by prioritizing tasks according to risk and demonstrate ability to manage time, working independently, and facilitating a team environment.
• Perform other duties as necessary.

 

The Work Schedule - Report to the office location Monday through Thursday with work from home on Fridays.

Required Knowledge, Skills, Abilities & Experience

Associate Cyber Compliance Analyst: 

• 0-2 years of cyber or IT audit, compliance, or technology experience. IT SOX experience is highly preferred. (Note:  A Master's degree will count as one year of experience).

Cyber