The Senior Cyber Security Analyst - Identity and Access Management, in conjunction with the Identity and Access Management Program Lead and organizational business units, is responsible for the delivery and support of NYPA's critical identity infrastructure. Ensures the confidentiality, integrity, and availability of NYPA information through the establishment of security controls, governance instruments (policies, standards), and associated identity processes. Facilitates the use of technology-based tools or methodologies to review, design and/or implement products and services to provide a strong IAM program that balances access with compliance and confidentiality.

• Collaborate with the IAM Program Lead on the design, implementation and management of key IAM systems (Active Directory, Azure, PAM)
• Enforce the principle of least privilege, ensuring users only have access to what they need
• Work closely with Cyber Governance teams on the development and maintenance of IAM policies and procedures to ensure compliance with NYPA Cyber standards and policies
• Oversee user account lifecycle, including provisioning, updates, deactivation, and deletion
• Collaborate with key NYPA Cyber Operations team members to investigate and troubleshoot IAM-related incidents to identify root causes and prevent future occurrences
• Identity management familiarity in one or more of the following areas
  • Industry leading Privileged Access Management (PAM) solutions, specifically Privilege Cloud Implementations
  • Safe Design and Account Privileged Account onboarding
• Experience with Customer Identity Management Solutions preferred
• Familiarity with Access Management concepts with industry leading Multi-Factor authentication and passwordless authentication solutions

#LI-JP1

• Ensure the development, implementation and refinement of security policies, procedures, and programs to protect the New York Power Authority's Information Technology cyber assets and enterprise digital ecosystem on premise and in cloud which include computers, networks, telecommunications equipment, data centers, and firewalls.
• Develop recommendations for IT Solutions based on business requirements; includes understanding and documenting business needs.
• Develop, implement, and monitor and enforce appropriate cyber security policies and standards pertaining to security, account access and control, incident and escalation reporting, intrusion detection, data protection and threat vulnerability management.
• Threat and vulnerability management, remediation, and oversight.
• Cyber Security Awareness and Education program management.
• Assist with the configuration of and monitoring health of NYPA Cyber Security Services and Technologies.
• Create, maintain, and manage documentation on cyber security assets, tools, and software.
• Collaborate with other IT disciplines as necessary to achieve Cyber Security outcomes.
  

• Strong understanding of interactions of applications, operating systems, and hardware configurations to produce high quality technically sound solutions.
• Robust understanding of IT industry trends and tools as they apply to providing solutions to stated business issues and opportunities.
• Comprehensive understanding of the IT system infrastructure and network topology, familiarity with cyber security strategies and Security Information and Event Management (SIEM) tools.
• Strong knowledge of cyber security policies and practices found throughout both the public and private sectors.
• Ability to understand and communicate complex IT security and policy planning.
• Demonstrated analytical problem-solving skills and practical cyber security experience.
• Ability to communicate complex technical and security related concepts to a broad range of technical and non-technical staff.
• Demonstrated ability to assist in managing complex projects as required.

• Associate's Degree / Military Veteran required with minimum 7 years of experience in Information Technology or Cyber Security

Preferred Education/Experience:

• Bachelor's degree with minimum 5 years of experience in Information Technology
• Industry Certification such as CISSP or CISM certification, or equivalent
  

May be required to respond Cyber Security alerts and communicate during off hours.