Cyber and Information Security Analyst - Cyber Security & TSOC

***FirstEnergy at a Glance*** We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger. FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts. ***About the Opportunity*** This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00] This position’s reporting location is in Akron, Ohio, and reports to the Manager of Cyber Security Compliance.). Candidates must reside within commute distance of the FirstEnergy Headquarters or be willing to relocate. The Cyber Security Compliance Analyst supports FirstEnergy’s commitment to safety, integrity, accountability, collaboration, and continuous improvement by ensuring strong, sustainable cyber security compliance practices across the enterprise. This role partners with Cyber Security, IT, OT, and business stakeholders across all FirstEnergy subsidiaries to protect cyber and information assets and support compliance with mandatory reliability, cyber security, and information protection requirements, including NERC Critical Infrastructure Protection (CIP) standards and state regulations. The successful candidate applies cyber security and compliance expertise in a manner that upholds FirstEnergy’s values, promotes a strong compliance culture, and enables reliable and secure electric service to customers. Responsibilities include **Cyber Security Compliance & Regulatory Stewardship** - Serve as a trusted subject matter expert (SME) for cyber security compliance requirements, providing clear, accurate, and ethical guidance to Cyber Security, IT, OT, and business units. - Support FirstEnergy’s compliance with NERC CIP Standards and state regulations, helping ensure the protection of BES Cyber Systems and the reliability of the Bulk Electric System. - Interpret new and revised regulatory requirements and collaborate with stakeholders to implement compliant, risk‑informed solutions. - Participate, as appropriate, in industry forums or standards development activities to responsibly represent FirstEnergy’s operational and regulatory interests. **Governance, Risk & Controls** - Identify, assess, and communicate cyber security compliance risks in a manner that supports informed, fact‑based business decisions. - Support risk remediation, mitigation tracking, and exception management in alignment with FirstEnergy policies, standards, and governance frameworks. - Translate technical findings and assessment data into clear risk statements and actionable compliance recommendations. **Audit Readiness, Evidence & Sustainment** - Guide and oversee ongoing compliance activities across business units, including evidence collection, control validation, and sustainment practices. - Support internal audits, regulatory audits, self‑certifications, and examinations by coordinating responses and ensuring high‑quality, defensible evidence. - Promote efficient, repeatable compliance processes that reduce operational burden while maintaining regulatory rigor. **Collaboration, Communication & Culture** - Educate and engage stakeholders to improve understanding of cyber security compliance responsibilities and reinforce a strong compliance culture. - Develop and deliver professional communications, training materials, reports, and presentations tailored to both technical and non‑technical audiences. - Build effective working relationships across organizational boundaries and influence outcomes through expertise, credibility, and collaboration. Qualifications - Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Engineering, Cor…