Cyber and Information Security Analyst - Cyber Security & TSOC

FirstEnergy at a Glance

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger.

FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

About the Opportunity

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]

This position’s reporting location is in Akron, Ohio, and reports to the Manager of Cyber Security Compliance.). Candidates must reside within commute distance of the FirstEnergy Headquarters or be willing to relocate.

The Cyber Security Compliance Analyst supports FirstEnergy’s commitment to safety, integrity, accountability, collaboration, and continuous improvement by ensuring strong, sustainable cyber security compliance practices across the enterprise. This role partners with Cyber Security, IT, OT, and business stakeholders across all FirstEnergy subsidiaries to protect cyber and information assets and support compliance with mandatory reliability, cyber security, and information protection requirements, including NERC Critical Infrastructure Protection (CIP) standards and state regulations.

The successful candidate applies cyber security and compliance expertise in a manner that upholds FirstEnergy’s values, promotes a strong compliance culture, and enables reliable and secure electric service to customers.

Responsibilities include

Cyber Security Compliance & Regulatory Stewardship

• Serve as a trusted subject matter expert (SME) for cyber security compliance requirements, providing clear, accurate, and ethical guidance to Cyber Security, IT, OT, and business units.

• Support FirstEnergy’s compliance with NERC CIP Standards and state regulations, helping ensure the protection of BES Cyber Systems and the reliability of the Bulk Electric System.

• Interpret new and revised regulatory requirements and collaborate with stakeholders to implement compliant, risk‑informed solutions.

• Participate, as appropriate, in industry forums or standards development activities to responsibly represent FirstEnergy’s operational and regulatory interests.

Governance, Risk & Controls

• Identify, assess, and communicate cyber security compliance risks in a manner that supports informed, fact‑based business decisions.

• Support risk remediation, mitigation tracking, and exception management in alignment with FirstEnergy policies, standards, and governance frameworks.

• Translate technical findings and assessment data into clear risk statements and actionable compliance recommendations.

Audit Readiness, Evidence & Sustainment

• Guide and oversee ongoing compliance activities across business units, including evidence collection, control validation, and sustainment practices.

• Support internal audits, regulatory audits, self‑certifications, and examinations by coordinating responses and ensuring high‑quality, defensible evidence.

• Promote efficient, repeatable compliance processes that reduce operational burden while maintaining regulatory rigor.

Collaboration, Communication & Culture

• Educate and engage stakeholders to improve understanding of cyber security compliance responsibilities and reinforce a strong compliance culture.

• Develop and deliver professional communications, training materials, reports, and presentations tailored to both technical and non‑technical audiences.

• Build effective working relationships across organizational boundaries and influence outcomes through expertise, credibility, and collaboration.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Engineering, Corporate Compliance, or a related discipline preferred.

• A bachelor’s degree in another field with relevant cyber security, compliance, or regulated‑industry experience will be considered.

• Experience working in a regulated environment (electric utility, energy, critical infrastructure, or similar) preferred.

• Prior experience supporting compliance audits or regulatory reviews is a plus.

• Working knowledge of NERC CIP Standards and cyber security governance frameworks (e.g., NIST, ISO) preferred.

• Ability to communicate complex and technical issues clearly, accurately, and professionally to diverse audiences.

• Experience with GRC platforms and compliance tools.

• Demonstrated ability to influence stakeholders, resolve compliance challenges collaboratively, and drive continuous improvement.

• Strong organizational skills with the ability to manage multiple priorities simultaneously.

• Commitment to ethical conduct, diligence, and accountability for results.

Benefits, Compensation & Workforce Diversity

At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time.

Safety

Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards.

Position Classification

Exempt

FirstEnergy Human Resources Team