IT Cybersecurity Analyst

It's fun to work in a company where people truly BELIEVE in what they are doing!

Headquartered in Arvada, Colorado with operations and presence in Europe, the Middle East, India, Asia, Japan, and China, Sundyne is a global manufacturer of precision-engineered, highly reliable, safe, and efficient centrifugal pumps and compressors for use in chemical, petrochemical, hydrocarbon, hydrogen, pharmaceutical, power generation, and industrial applications. Sundyne is a leader in delivering precision-engineered and highly reliable pumps & compressors to many of the world’s most important markets, including energy, chemical, industrial, carbon capture, clean hydrogen, and renewable fuels. Sundyne pumps and compressors are available in API, ANSI/ASME, ISO, and other industry-compliant designs. To learn more about the Sundyne family of precision-engineered pumps and compressors, please visit www.sundyne.com.

Position Description

Sundyne is seeking a Cybersecurity Analyst to be the primary driver and owner of Sundyne’s entire Cybersecurity program. Responsibilities will be to assess Sundyne cybersecurity tools/controls, plan improvements, collaborate with internal and external staff on implementing improvements, and report status or progress to management.

Job Duties & Responsibilities

CIS/NIST Framework

• Perform ad-hoc and on-going assessments of Sundyne controls and compare to CIS/NIST Framework

• Identify gap areas or areas requiring additional improvements

• Discuss, plan, schedule, and implement changes in the Sundyne environment working with both internal staff and outsourced service providers to adhere to CIS/NIST framework

• Report to management on status, plan, schedule and future state

Vulnerability Scanning / Penetration Testing

• Work with outsourced service provider to schedule and conduct vulnerability scans and penetration tests using existing tool(s)

• Review and assess findings with respective stakeholders

• Discuss, plan, schedule, and implement changes in the Sundyne environment working with both internal staff and outsourced service providers to reduce or mitigate identified vulnerabilities

• Report to management on status, plan, schedule and future state

Other Cybersecurity Assessments/Certifications/Questionnaires

Assist in conducting other cybersecurity assessments as required

• Review and/or complete various cybersecurity questionnaires on Sundyne's behalf when requested by 3rd parties

• Discuss, plan, schedule, and implement changes in the Sundyne environment working with both internal staff and outsourced service providers to reduce or mitigate identified vulnerabilities

• Report to management on status, plan, schedule and future state

• Use cybersecurity questionnaires as input into Sundyne cybersecurity program, to identify potential areas of improvement

• Create Sundyne’s Cybersecurity questionnaire for completion by 3rd parties which have access to Sundyne IT or provide IT service to Sundyne

• Assist in the certification/re-certification of Cyber Essentials Plus certification (CE+)

• Develop and execute a plan towards gaining ISO27001 certification for all Sundyne sites globally

• Develop and execute a plan towards gaining ISO 9001:2015 certification for all Sundyne sites globally

Security Projects/Initiatives

• Research, plan, implement, project manage security projects or initiatives in the pursuit of increased Security

• Leverage all inputs to put together a holistic cybersecurity program for the organization

Review and/or develop

• Incident response plans

• Tabletop exercises

• BCP/DR Plans

• Customer Notification Plans

• Assist other IT Security team members as needed

• Phishing Simulations

• Email & web filtering

• Span and Phishing email investigations

• IPS/IDS alert investigations

• SIEM alert investigations

• Review and oversee zero-day vulnerabilities

• Review or create policies, standards and procedures related to Cybersecurity topics.

 Skills & Abilities

• Ability to maintain multiple projects and initiatives at the same time

• Experience communicating and collaborating with multiple