Assoc Security Technical Analyst

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.  

 

This position is not eligible for immigration sponsorship, e.g., H-1B, TN, etc. Please do not apply if you will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B, TN, etc., now or in the future. We are unable to hire individuals with CPT, OPT, or STEM OPT for this position as the position is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship for a work visa.

 

Location: This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI.  The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

General Summary of Job Responsibilities

The role of the Associate Security Technical Analyst - Governance, Risk, and Compliance (GRC) requires technical skill, superior customer service, and excellent communication and writing skills. The Associate Analyst is an entry-level role that has some experience at gathering and distinguishing key details, and able to assist with decision-making processes. This role encompasses a basic understanding of technology governance, risks, controls, and compliance along with modern day cyber security issues, asset management lifecycles, and data management. This position contributes to roadmaps and standards, helping ensure standards are kept current. 

 

We are currently filling two positions: one on the Risk Management team and the other will initially be on the Governance team focusing in software asset management.  Both roles focus on day-to-day GRC (Governance, Risk, & Compliance) operations. The ideal candidates will be adept at helping identify and implement GRC process and operational improvements; automation skills are a plus!

Essential Duties and Responsibilities

• Develops and maintains visual dashboards, producing high-quality reports and documents, proofreading for accuracy and succinctness, providing recommendations to Sr Principal(s), Principal(s), and management.
• Supports the team to analyze and implement operational, regulatory and business mandates and legal requirements; identifies and analyzes less complex, ambiguous and/or conflicting business process/technology issues; assists department managers on development, enhancement, and maintenance issues
• May be directly responsible for one or more of the following supporting senior staff in work related to: controls, risk mitigation/management, compliance, audit administration and support, hardware/software/OT asset management operations;
• Participates in team collaborative efforts, such as annual team goals and planning, process continuous improvement, waste elimination initiatives, daily and weekly operating reviews. Takes an active approach at helping team maintain internal processes, gap analysis and resolution. Adheres to Company's quality systems and methodologies.
• Contributes as an entry-lev resource on the IT & Security Governance, Risk, and Compliance Team, working independently with Company stakeholders and keeping leadership appropriately informed; may also interact with vendors, publishers, governmental agencies, or other companies
• Ensures timely completion of deliverables; assists the team at meetings and review boards; and acts as a backup for others on the team; supports team members in managing daily operations, validating objectives and KPIs; takes corrective action with KPI countermeasures if needed, and collaborates with business and technical areas to achieve goals
• Researches and advocates on new (and renewed) technologies, architectures, and products for the enterprise;
• Develops knowledge to help senior staff and management with decisions and solutions for current and incoming work, demonstrating clear, thoughtful approaches; regularly meets with stakeholders to address questions and issues, ensuring decisions and action items are documented and executed; exhibits proactive demeanor in all interactions
• Builds skill to learn how to translate written technical standards to non-technical stakeholders and articulates standard gaps, using tools and templates available; supports senior staff that monitors standard and policy adherence, addressing compliance issues
• Other duties as assigned or may be necessary