Cybersecurity Senior Analyst

Company overview:

MN8 Energy is one of the largest independent solar energy and energy storage owner-operators in the U.S., serving enterprise customers with clean energy and complementary solutions, such as battery storage and EV Charging, to enable an electrified, decarbonized world. Originally founded inside of Goldman Sachs in 2017, our fleet has grown to nearly 3-gigawatts of solar, including 850 projects across 27 states, and over 270 megawatts of battery storage projects, with each project tailored to achieve the bold decarbonization targets and goals of our more than 200 blue-chip customers. MN8 is headquartered in New York with offices in Boca Raton, Florida and Madrid. For more information: mn8energy.com.

Position overview:

We are seeking an experienced Cybersecurity Analyst to join our team. The ideal candidate will have a strong background in NIST2 and NERC standards. Key responsibilities include developing cybersecurity policies, ensuring compliance, managing vendors, planning awareness campaigns, conducting phishing simulations, designing incident response plans, defining Data Loss Prevention strategies, and managing SOX and security audits.

As the Cybersecurity Senior Analyst, you will:

• Policy Development: Draft and revise cybersecurity policies, ensuring alignment with company goals and regulatory requirements.
• Compliance Management: Ensure compliance with cybersecurity regulations like NIST2, NERC and GDPR. Conduct audits to identify and remediate gaps.
• Cybersecurity Vendors Management: Evaluate and manage vendor relationships, ensuring timely service delivery and high standards.
• Awareness Campaigns Planning and Execution: Develop and deliver cybersecurity awareness campaigns and training materials.
• Phishing Campaigns Execution: Design and execute phishing simulations, analyze results, and provide feedback to employees.
• Incident Response Planning: Develop incident response plans, coordinate with stakeholders, and conduct post-incident reviews.
• Tabletop Exercises Design and Conducting: Design and conduct exercises to test incident response plans and evaluate preparedness.
• Defining and Deploying Data Loss Prevention (DLP) Strategies: Implement DLP strategies, monitor systems, and customize solutions as needed.
• Managing SOX and Other Security Audits: Manage regulatory audits, develop corrective action plans, and improve security posture.

Our ideal candidate will have:

• Bachelor’s degree related to Cybersecurity, IT.
• Minimum of 5 years of experience in cybersecurity, with a focus on policy development, compliance, and vendor management within an agile and flexible organization or consultancy company.
• Knowledge of current cybersecurity threats, vulnerabilities, and mitigation strategies.
• Experience in incident response planning and conducting tabletop exercises.
• Defining and deploying Data Loss Prevention (DLP) strategies.
• Managing SOX and other security audits.
• Proficiency with Microsoft cybersecurity tools (Defender, Sentinel, Security Center, inTune).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a team to achieve organizational goals.
• Strong project management skills with the ability to manage multiple initiatives simultaneously
• Relevant certifications such as CISSP or CISM are preferred.

How we set you up for Success:

At AIRS, an affiliate of MN8 Energy LLC, we cultivate a culture of equity, through transparency and accessibility, where everyone thrives. We know our most valuable resource is our people. That’s why we offer the following benefits. By investing in you, we know we are investing in the clean energy of tomorrow.

• Medical Insurance beginning the 1st of the month following your date of hire
• Meal tickets
• Hybrid work schedule (Tuesday through Thursday in the office) including a “work from anywhere” allocation

MN8 Energy is an Equal Opportunity Employer and fully subscribes to the principles of Equal Employment Opportunity to ensure that all applicants and employees are considered for hire, promotion, and job status without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, marital or familial status.