Security Analyst/Program

The Security Analyst/Program is an individual contributor in the Cybersecurity Services area of the Information Services Department who participates in the development, implementation, and administration of cybersecurity practices within Southwest Gas Corporation. Areas of responsibility include providing overall cybersecurity governance, risk management, policies, security awareness, framework alignment, and recommendations of security solutions used to mitigate risks for the Company.

POSITION DIMENSIONS

This position is not responsible for people or budgets. This position frequently exchanges information with non-exempt and professional level personnel inside and outside IS, Business leaders, department managers, outside consultants, vendors, and contingent workers and infrequently exchanges information with officers.

QUALIFICATIONS

There are clear policies and procedures that the incumbent uses to determine how this job is performed. This position requires a minimum of two years of work experience in implementing cybersecurity governance and risk management. Confident presentation and facilitation skills and good interpersonal and leadership skills are required to facilitate working with peers and all levels of management.

A bachelor's degree in Information Technology or Cybersecurity is preferred. Audit, compliance or governance experience is preferred with a blend of technical knowledge, business development and project management skills. Industry recognized information security certifications are preferred.

ESSENTIAL JOB RESPONSIBILITIES

• Lead or participate in the development and collaborative execution of the security awareness program and training to include the deployment of Phishing exercises
• Drive the development and implementation of governance and risk reporting frameworks
• Analyze, understand, communicate, and document current practices while driving maturity and proactive risk management
• Drive alignment with best practices and frameworks leveraged by the industry to identify gaps in security posture
• Interface with end-users and other business units to develop new and maintain existing cybersecurity controls and practices, mitigate risk and resolve vulnerabilities as needed
• Identify, document and communicate cybersecurity risk and mitigation tactics to business leaders so that it can be incorporated into their business decision making process
• Review software and Cloud solutions to identify risks and provide recommendations to the business
• Develop, implement, and maintain company-wide processes and procedures in alignment with cybersecurity best practices
• Lead or participate in the development and collaborative execution of the security awareness program and training to include the deployment of Phishing exercises and awareness initiatives
• Promote security awareness throughout the Company
• Establish and maintain liaison with key user representatives, support personnel, and vendors
• Maintain awareness of regulatory changes that will affect information security policy, standards and procedures, and recommends appropriate changes
• Participate in compliance reviews, as requested by internal, external auditors, or compliance/regulatory agencies
• Recommend security improvements by assessing current procedures, control structures, and resources
• Perform related duties and responsibilities as assigned
• Regular and predictable attendance is a condition of employment and is an essential function of the job

SALARY DETAILS:

Las Vegas: $82,926 - $120,278

At Southwest Gas, attracting the best talent is key to our strategy and success as a company. We use flexibility to develop competitive compensation offers to ensure we are able to hire the best candidates. The quoted salary range represents the minimum and maximum of the pay range for the position. It is provided as a good faith estimate as to what our ideal candidates are likely to expect, as we tailor our offers within the range based on the selected candidate's experience, industry knowledge, location, technical and communication skills and other factors that may prove relevant during the interview and selection process.