Governs patch management processes and improve reporting efficiency through independent oversight and planning for the defined set of onboarded CI types within the Patch Management scope. Responsible for the content, publication, communication, and clarification of Patch Management standards, policies, procedures, Knowledge-Base Articles (KBAs) and related SharePoint resources. Servers at the point of contact for internal and external questionnaires and regulatory queries related to Patch Management.
JOB DUTIES
- Understands and applies principles, theories and concepts related to the profession and ERCOT's culture.
- Exercises judgment within defined procedures and practices to determine appropriate action.
- Impact is generally limited to specific assignments or projects.
- May respond to inquiries and/or provide assistance and/or guidance to lower level workers.
ADDITIONAL JOB DUTIES
- Serves as a subject matter expert (SME) for Patch Management processes and procedures, maintaining its accuracy, completeness and integrity.
- Develops and maintains patch management policies, procedures, and schedules that align with security requirements and minimize operational impact.
- Leads the onboarding, updating and decommissioning of Patch Management CIs.
- Leads the planning, monitoring and deployment of security patches and updates to servers, workstations, and applications.
- Facilitates and collaborates with Cybersecurity and other IT organizations to evaluate vulnerabilities, prioritize remediation efforts, and ensure timely patching of critical systems.
- Generates comprehensive dashboards and reports on patch compliance, system status, and vulnerabilities, and communicate findings to stakeholders.
- Provides guidance and mentorship to other team members on patch management with best practices and tools.
- Ensures all patching activities comply with organizational security policies, industry standards, and relevant regulations.
EXPERIENCE
-
Minimum 5 years of experience in IT operations with a focus on patch management, configuration management, or IT service management (ITSM).
-
Experience with vulnerability scanning tools and security frameworks
-
Exposure to Service Now Vulnerability Management processes and data model
-
Experience with CMDB platforms such as OpenText uCMDB or similar tools, ServiceNow uCMDB experience is a plus.
-
Ability to write SQL statements
-
Proven ability to lead projects, mentor junior staff, and communicate technical information effectively to both technical and non-technical audiences.
EDUCATION
- Bachelor's Degree: Business, Computer Science, Data Science, Information Systems or related field (Required)
- or a combination of education and experience that provides equivalent knowledge to a major in such fields is required
CERTIFICATION
- ITIL Foundation (Preferred)
- CMDB Fundamentals (Preferred)
- CompTIA Security+, ISC2 Certified in Cybersecurity (Bonus)
Electric Reliability Council of Texas
Texas United States
www.ercot.com
