IT Business Systems Analyst-Level 2 - Experienced (6 - 10 Years)

Additional Job Details:
Conduct comprehensive cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle
Perform vendor security assessments for standard and expedited review processes
Analyze vendor security documentation, certifications, and compliance frameworks
Provide risk ratings, requirements and recommendations for vendor engagements
Manage vendor security questionnaires and documentation review processes
Ensure vendor assessments comply with industry standards and regulatory requirements
Maintain comprehensive documentation of risk assessments and mitigation strategies
Partner with business units, procurement, legal, and IT teams on vendor risk matters
Present risk findings and recommendations to management and steering committees
Serve as subject matter expert on third-party cybersecurity risks

Preferred Education & Experience
Bachelor's degree in Information Security, Computer Science, Business Administration, or related field
3-5 years of experience in cybersecurity risk management or third-party risk assessment

Preferred Certifications
CISA (Certified Information Systems Auditor)
CTPRA (Certified Third-Party Risk Assessor)

Technical Skills
Strong understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2)
Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.)

Core Competencies
Excellent analytical and critical thinking skills
Strong written and verbal communication abilities
Project management and organizational skills
Attention to detail and ability to work under pressure
Professional communication style for executive-level reporting

Enable Skills-Based Hiring	No
Furlough Notification	All NextEra Energy Contingent Workforce Program (CWP) assignments are eligible for worker furlough. Typical furlough schedules coincide with select national holidays, but may be subject to change. Suppliers will be notified by the CWP of those workers impacted and the applicable furlough dates prior to each furlough period.
Worker Building Location	JB - Juno Beach Office - 0000103492
Will driving be required as part of position duties/work?	No
Driving Record Validation	For all positions indicating driving requirements, supplier must hold validation of non-restricted current driver''s license and demonstrate the following: no alcohol/drug related driving offenses within the previous five years and/or the license is not currently suspended or restricted related to hours of driving or reason for driving.

Will Per Diem and Mob/De-Mob expense types be available for this requisition?	No
If Per Diem is available, please indicate the maximum amount:	N/A
If Nuclear Business Unit: On-Boarding Note	Nuclear workers requiring unescorted badge access will follow onsite in-processing procedures. All others will be required to complete Non-Nuclear pre-assignment screenings through their staffing supplier. Please contact CWP with any questions: cwp@nexteraenergy.com or 561-694-4761.
Will the selected worker require unescorted badge access into Nuclear protected areas?	No
Is NERC CIP unescorted physical or cyber access required for this assignment?	No
Which NERC access is needed?	N/A
Is Federal Energy Regulatory Commission access required?	No

Shift Type	Standard Shift (8-5)

Hours per Day	8
Hours per Week	40
Total Hours	688.00

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - Abacus.