Business Systems Analyst 2 (N-IT)

Summary

First Tek, Inc. is recruiting a Business Systems Analyst 2 to support BPA’s OT Cybersecurity Program Management and Compliance organization. The role serves as the primary analyst for the Change and Configuration Management team, supporting compliance with NERC CIP, DOE NIST/FISMA, and other regulatory requirements. Responsibilities include managing change requests, maintaining configuration baselines and records, supporting audits, developing processes and documentation, and providing analysis, training, and system support.

Responsibilities

• Perform BPA management-approved processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements
• Provide quality data management and stewardship. Maintain filing system(s), files, emails and records in accordance with compliance requirements. File and disperse documents/letters only to appropriate personnel. Maintain all official records in accordance with the Information Governance & Lifecycle Management (IGLM) standards and procedures. Validate official records are accurately maintained for auditing purposes
• With federal employee oversight, perform review and verification of Control Center (CC) and other applicable GSS compliance with regulations from FISMA, DOE, WECC, NERC, and FERC; as well as performing audit preparation for the aforementioned regulatory bodies and Internal (CG) audits; and Self-Certification data calls
• Participate in improvement efforts, providing recommendations and hands-on assistance with position-related quality, compliance or efficiency improvements
• Validate TTL items are currently modeled correctly in the ChangeGear (CMDB) database; alert SME or BPA manager of any issues or concerns
• Maintain a high-level overview of the complex inter-connected data systems that make up the Change and Configuration Management (CCM) Program. (TripWire, SolarWinds, AssetDB, ChangeGear, CMS, etc.)
• Attend meetings, conferences, and seminars to support the customer needs as they related to BPA’s CCM Program
• Monitor the Request for Change (RFC) Queue; verify pre and post testing has been performed by the appropriate Resource Managers (RM)
• Review specifications, verifying that all essential requirements are documented; alert applicable SME or BPA manager of results or any issues / concern; make recommendations for corrections / changes
• Review the logical top-level design for applications and information systems (including test plans and procedures); provide results, concerns and/or recommendations to BPA manager
• Collaborate with other IT CM Specialists to share best practices, provide recommendations and assistance on critical needs, and coordinate Transmission-wide initiatives
• Identify and recommend training needs and include major areas of uncertainty in approach, methodology, or interpretation and evaluation processes resulting from such elements as continuing changes in program, technological developments, unknown phenomena, or conflicting requirements
• Support the program presentations, in-house and client training, and functional education; arrange, conduct and facilitate management-approved presentations and training sessions
• Develop and present recommendations and supporting analysis for management decisions
• Prepare technical reports, documents, studies, and system documentation as required
• Confer with system users to document and resolve existing system issues and problems
• Provide back-up support and workload assistance for the group’s Process & Controls Support Team
• Support configuration change management efforts
• System modeling and maintain technical configuration baseline documentation
• Detect and correct configuration baseline errors
• Assist in defining, developing and documenting of new processes and procedures as required
• Support process and procedure roll-out
• Provide support for both the manual and automated software patch program
• Track the Request for Change (RFC) related to each mitigation plan and report status to appropriate system owner
• Assist BPA management with developing and documenting system processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements
• Support the development of necessary documentation to support reporting and audit requirements
• Provide quality assurance for organization to verify compliance to regulatory standards and guidelines
• Provide support, including gathering & formatting information/data, to NERC annual certification process, WECC audit, and any other spot audit or compliance data request
• Assist with data stewardship for the configuration management program
• Attend meetings to support the customer needs. Attendance assists in maintaining currency of technical, procedural and acquisition knowledge

Skills

• Remote Work Eligible - Must live in BPA's service territory of WA, OR, ID, MT
• Up to 5% for meetings/training
• NOT open to Foreign Nationals
• With an applicable Associates degree, 7 years of experience is required
• With an applicable Bachelor's degree, 5 years of experience is required
• Without an applicable degree, 9 years of experience is required
• Experience should include demonstrated analyst work experience in Computer/Information Technology, Business Systems and requirements engineering, operations management or other closely related field
• 3 years' experience working with the following:
• Configuration Change management concepts and practices for secure/reliable technology systems
• Compliance standards and best practices frameworks as applied to systems development and program management
• Process and procedure development
• 1 year experience in the use of configuration change management tools/systems
• 1 year previous compliance and/or audit support experience
• Valid U.S. Driver's License is required
• An Associate's or Bachelor's degree in Computer/Information Technology, Business Systems, Engineering or a directly-related technical field is preferred
• Experience in any aspect of the software development lifecycle for a utility environment
• Experience with the set-up, configuration or oversight of change and/or configuration management tools
• Experience implementing NIST/FISMA standards/guidelines
• Experience with applying the concepts of ITIL v3 or later, or similar technology management frameworks

Qualifications

Must Haves

• Remote Work Eligible - Must live in BPA's service territory of WA, OR, ID, MT
• Up to 5% for meetings/training
• NOT open to Foreign Nationals
• With an applicable Associates degree, 7 years of experience is required
• With an applicable Bachelor's degree, 5 years of experience is required
• Without an applicable degree, 9 years of experience is required
• Experience should include demonstrated analyst work experience in Computer/Information Technology, Business Systems and requirements engineering, operations management or other closely related field
• 3 years' experience working with the following:
• Configuration Change management concepts and practices for secure/reliable technology systems
• Compliance standards and best practices frameworks as applied to systems development and program management
• Process and procedure development
• 1 year experience in the use of configuration change management tools/systems
• 1 year previous compliance and/or audit support experience
• Valid U.S. Driver's License is required

Nice to Haves

• An Associate's or Bachelor's degree in Computer/Information Technology, Business Systems, Engineering or a directly-related technical field is preferred
• Experience in any aspect of the software development lifecycle for a utility environment
• Experience with the set-up, configuration or oversight of change and/or configuration management tools
• Experience implementing NIST/FISMA standards/guidelines
• Experience with applying the concepts of ITIL v3 or later, or similar technology management frameworks

Benefits

• Remote work eligible for workers who must live in BPA's service territory of WA, OR, ID, or MT; official duty station is the home address.
• Telework full-time, with days onsite as required for meetings/training.
• Reimbursement of travel costs may be available for approved conference, workshop, and training attendance, subject to negotiation with the supplier and Federal Travel Regulations.
• BPA-provided safety training will be the same training provided to Federal Workers.