Business Systems Analyst 3 (N-IT) - Compliance, Change & Configuration Management

Business Systems Analyst 3 - Compliance, Change & Configuration Management

This contract Business Systems Analyst 3 assignment will support (CLIENT's) OT Cybersecurity Program Management & Compliance (JSP) organization. OT Cybersecurity Program Management & Compliance is responsible for providing centralized program management, reliability standards owner, and program support services for the Field Compliance and Security, Asset Management, Business Continuity, Vulnerability Management, Change and Configuration Management, and Security Management Programs. This assignment will serve as primary Point-of-Contact (POC) for the Change and Configuration Management team.

The Change and Configuration Management Team identifies, controls, and documents changes to the hardware, software (third-party and CLIENT executables), and database schemas for all Control Center information systems that reside in production and/or on production networks. These teams work closely with one another supporting OT's Change and Configuration Management (CCM) Program, with projects that often overlap and complement

POSITION RESPONSIBILITIES General These responsibilities are performed by both teams / areas of focus; some duties will be performed by collaboration of the two teams.

• Develop / draft, recommend and document CLIENT management-approved processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements.
• Provide draft closure evidence to the internal CLIENT Security Governance Team (SGO) for all CIP standards as implemented at CLIENT for review and acceptance.
• Develop and recommend sustainment plan for the Change and Configuration Management (CCM) Program, which includes:
• Develop, recommend, and implement management-approved recommendations for: 1) the Qual Card Program; 2) Data Mapping and Modeling; and 3) Data Quality Management.
• Developing / drafting and recommending training curriculum and materials; and, conducting training, utilizing CLIENT management-approved training materials.
• Provide quality data management and stewardship. Maintain filing system(s), files, emails and records in accordance with compliance requirements. File and disperse documents/letters only to appropriate personnel. Maintain all official records in accordance with the
• Information Governance & Lifecycle Management (IGLM) standards and procedures. Validate official records are accurately maintained for auditing purposes.
• Perform review and verification of Control Center (CC) and other applicable GSS compliance with regulations from FISMA, DOE, WECC, NERC, and FERC; as well as performing audit preparation for the aforementioned regulatory bodies and Internal (CG) audits; and Self-Certification data calls.
• Provide draft narratives for various compliance driven data requests.
• Arrange, facilitate / conduct, and document team meetings; provide operational updates on assigned work products; provide status updates to CLIENT management as requested.
• Participate in improvement efforts, providing recommendations and hands-on assistance with position-related quality, compliance or efficiency improvements.
• Validate TTL items are currently modeled correctly in the ChangeGear (CMDB) database; alert SME or CLIENT manager of any issues or concerns.
• Maintain a high-level overview of the complex inter-connected data systems that make up the Change and Configuration Management (CCM) Program. (TripWire, SolarWinds, AssetDB, ChangeGear, CMS, etc.).
• Attend meetings, conferences, and seminars to support the customer needs as they related to CLIENT's CCM Program
• IT Change Management
• Serve as POC and technical lead for the team preparing for, carrying out, validating and documenting all information technology (IT) changes to hardware, software (third-party and CLIENT executables), and database schemas for the Control Center.
• Track and monitor the Request for Change (RFC) Queue; verify pre and post testing has been performed by the appropriate Resource Managers (RM).
• Create, develop, recommend and actively monitor reports such as the "Over 20" and "Over 30" reports to validate CLIENT is not in violation of CIP standards.
• Analyze system infrastructures, functional requirements, and technical capabilities for system acquisitions; provide results and recommendations to CLIENT manager.
• Develop / draft or review specifications, verifying that all essential requirements are documented; alert applicable SME or CLIENT manager of results or any issues / concern; make recommendations for corrections / changes.
• Distribute requirements to hardware and software configuration items or manual operations using appropriate modeling techniques including automated structured analysis tools.
• Review the logical top-level design for applications and information systems (including test plans and procedures); provide results, concerns and/or recommendations to CLIENT manager.
• Verify that project software specifications, interface requirement specifications and software development plans are correct and of adequate scope; alert SME or CLIENT manager of any concerns.
• Collaborate with CLIENT manager, stakeholders, project teams and/or other parties as assigned to create / draft and recommend a comprehensive communication strategy; assist with management-approved implementation activities as requested. Provide expertise and assistance to CLIENT Managers and Project Managers to validate quality deliverables on a wide range of communication mediums and topics.
• Collaborate with other IT CM Specialists to share best practices, provide recommendations and assistance on critical needs, and coordinate Transmission-wide initiatives.
• Review and validate that configuration management policies and procedures provide thorough requirements traceability through version release and adequate documentation to support system operation and maintenance.
• Develop / draft plans and recommend operations' schedules, staffing requirements, and resource allocations for projects.
• Document detailed programs while applying applicable standards to all products.
• Identify and recommend training needs and include major areas of uncertainty in approach, methodology, or interpretation and evaluation processes resulting from such elements as continuing changes in program, technological developments, unknown phenomena, or conflicting requirements.
• Assist CLIENT management with implementing a Training Plan that successfully allows the user community to efficiently and effectively use a new system or upgraded system. Audience/user Community may include internal and external customers/users.
• Prepare / draft and recommend program presentations, in-house and client training, and functional education; arrange, conduct and facilitate management-approved presentations and training sessions.
• Develop and present recommendations and supporting analysis for management decisions.
• Prepare technical reports, documents, studies, and system documentation as required.
• As requested, develop technical system concepts and designs to support proposal development and position papers.
• Monitor system performance to alert CLIENT manager or SME where adjustments may be needed or where changes may be needed in the future.
• Confer with system users to document and resolve existing system issues and problems
• Support organization change process and configuration management efforts by:
• Performing system modeling and configuration system baselines
• Defining, developing, and documenting new management-approved processes and procedures.
• Support process and procedure roll-out by assisting with communications, arranging / facilitating any necessary meetings, and drafting related materials.
• Develop / draft and recommend training materials; provide, facilitate and conduct training as requested.
• Create and support / assist with both the manual and automation software patch program.
• Verify the Request for Change (RFC) and associated mitigation plans are managed
• Provide back-up support and workload assistance for the group's Process & Controls Support Team

REQUIREMENTS Education & Experience:

• A degree in Information Technology, Technical Management, Information Management, Engineering, Business Systems, Computer Science (or a directly related technical discipline) is preferred.
• With an applicable Bachelor's degree, 8 years of experience is required.
• With an applicable Associate's degree, 10 years of experience is required.
• Without an applicable degree, 12 years of experience is required.

Experience should be consistent with the specific requirements of business systems analysis and progressively more technical in nature

Required Skills & Experience

• 2 years previous compliance and/or audit support experience
• Experience in the use of change and configuration management tools/systems
• Experience with process development and roll-out

Experience with the set-up, configuration or oversight of change and/or configuration management tools

Preferred Skills & Experience