The Cybersecurity Analyst performs actions in each of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) categories of Identify, Protect, Detect, Respond and Recover that contribute to overall cyber risk reduction for the agency. Example actions include, but are not limited to, enterprise vulnerability management, third party risk management, managing reported and detected phishing emails, and interfacing with TriMet's Managed Detection and Response (MDR) services. A majority of the functions performed include documented security operation aspects of Center for Internet Security (CIS) Controls that are built into the agency's Information Technology (IT) and Operational Technology (OT) implementation and ongoing operations. Activities also include assisting IT and other Divisions in the implementation of the CIS Controls as directed. This role provides Tier 1 support for cybersecurity issues within the agency. This role requires being onsite three (3) days per week. Ensure a commitment to safety and regulatory compliance through effective leadership, training, role modeling and implementing practices that demonstrate safety is a fundamental value and a priority in all aspects of work. Serve as a good steward of TriMet by regularly utilizing our transit system to maintain a strong and current understanding of customers' experiences and of TriMet's product and service offerings. Perform documented processes leveraging hardware and software tools maintained and operated by the IT Cybersecurity Team in support of Information Technology (IT) and Operational Technology (OT) security functions. Responsible for investigating reported security events and escalating when appropriate. Perform documented Risk Management functions including on risk assessments of new vendors and ongoing Third Party Risk Management (TPRM). Review all incoming service requests for the Cybersecurity Team assign to team member based on assigned responsibilities, Assist with multiple cybersecurity related projects and initiatives. A Bachelor's Degree is required. A Bachelor's Degree in Information Systems, Computer Science, or Information Security is preferred. A minim um of two (2) years total credited experience.

• Six (6) months of cybersecurity experience are required. Six (6) months of exposure to National Institute of Standards and Technology (NIST), Cybersecurity Framework (CSF) and/or Center for Internet Security (CIS) Controls are preferred. Or any equivalent combination of training or experience.

•The amount of credit a candidate receives for prior years of experience is based on the relevancy of that experience to the required or preferred prerequisites of the job description. Experience is prorated based on hours worked. LRHR assigns and validates the "credited experience". Type of Position / Grade / FLSA Grade 14, Exempt, Non-Union, Full-Time.

Salary Range Minimum:

$88,247.00/year

Maximum:

$132,372.00/year Salary offers will be determined by a candidate's education, training and relevant experience. A complete work history will be required for this purpose at the time of offer; any omitted work history will not be considered after hire. Any final offer of employment will fall within the range stated above. For transparency, we choose to list the full available grade range, however, TriMet's salary administration process will ultimately determine the final salary offered. Selection Process Candidates will be selected based at a minimum on the result of: 1. Application Review (an up-to-date resume is required) 2. Panel Interview 3. Reference Check and Degree Verification Supplemental Information Make sure you describe in detail how your education, training and work experience fit with this role. You are encouraged to attach a resume, cover letter, training certificates and/or letters of recommendation with your application. You are permitted five attachments of less than 5MB each.

Internal applicants:

Information in your personnel file will not be used in lieu of information requested on your application. Incomplete applications will not be considered. If you are a qualified veteran and would like to apply for veterans' preference points, you will need to reflect your status on the application and attach supporting documentation at the time of application submission. If you need accommodation under the Americans with Disabilities Act for any part of the application process, contact our Human Resources staff at 503-962-7505, or the TTY line at 7-1-1. Note that we require a minimum of two workdays' notice prior to the need for accommodation. TriMet is an equal opportunity employer, committed to developing an organization that is reflective of and sensitive to the needs of the diverse community we serve, including veterans, the elderly, and individuals with disabilities. ADA Statement As applied to the workplace, applicants and employees must be qualified to perform the essential functions of the job with or without reasonable accommodation. Essential functions may include required job functions performed infrequently as well as production standards related to the quality and quantity of work. If a person with a disability could meet job qualifications with a reasonable accommodation, TriMet will work with the employee to accommodate the need. If TriMet's accommodation is effective in allowing the employee to perform the essential functions of the job, it need not be the employee's preferred accommodation.