Information Technology Security Analyst

Pine Gate Renewables is a leading renewable energy company focused on project development and strategic financings throughout the United States. It currently manages 750MW of operational assets, with more than 10GW in active development and has raised over $2 billion in project capital to date. The company’s Pine Gate Impact initiative contributes to multiple non-profit organizations aimed at improving the environment and local communities. Headquartered in Asheville, NC, Pine Gate Renewables was named to Fast Company’s Most Innovative Companies list in 2021, awarded the gold medal in the energy category for Inc.’s Best in Business 2020 list and ranked #6 on Inc. 500’s list of “Fastest Growing Energy Companies” in 2018. Pine Gate Renewables works every day to achieve its mission to “Get Solar Done.”

The Role:

The Information Technology Security Analyst is responsible for the assessment, design, development, deployment, monitoring, compliance and maintenance of the comprehensive information technology and cyber security programs across the technology ecosystem. Success in this role is defined by successfully identifying, planning for and mitigating the modern threat landscape, including identifying threat actors, attack vectors and threat techniques and then recommending and implementing effective protective and adaptive technologies, techniques and training to reduce overall risk and exposure, as well as the ability to recover quickly and completely from a successful attack incident.

What You’ll Do:

• Roll-up your sleeves and perform a hands-on role in all areas of information technology and cyber security management
• Develop protocols, procedures, and training to protect all fleet assets
• Implement the appropriate security framework for compliance requirements
• Maintain records of systems and resources to ensure ongoing compliance
• Adapt to competing demands, evolving threats, and new responsibilities
• Additional duties as assigned

Must Haves:

• Demonstrated capability to assist in developing information technology and cyber security programs based on accepted security frameworks
• Understanding of Information Security frameworks ISO 27001, NIST 800-53 and NIST CSF
• A minimum of 3 years of progressively responsible experience in hands-on application of information technology and cyber security
• General knowledge of utility industry and the challenges facing the industry as well as an understanding of utility processes/programs and regulations including NERC CIP
• Experience with operational technologies (SCADA, ADMS, DERMS, EAM, GIS)

Nice-to-Haves:

• Cybersecurity auditing experience

Education and Certifications:

• Bachelor’s degree in Computer Science, Computer Technology, Information Technology, Cybersecurity or a related field
• Advanced degree in Computer Science, Cybersecurity or related fields is a plus
• Required Certification: CISSP
• Desirable Certifications: CRISC, CISM, CCSP, CEH

Working Environment and Physical Demand

• Ability to travel; 25%