1) Perform risk management tasks to identify cybersecurity risks, measure the implementation of controls to achieve data protection requirements, and create processes to address gaps or concerns.
2) Follow information security and data protection frameworks to ensure adequate protection procedures exist around APS' sensitive information, with in-depth knowledge on technical controlled information.
3) Provides analysis, design, development, implementation and security assessments to ensure compliance and support vulnerability management activities.
4) Initiate improvements of processes, system(s), or products to enhance performance of the technical area.
5) Maintain and regularly reconcile the inventory of applications and databases containing Technical Controlled Data to ensure compliance with export control laws and regulations.
6) Assist data owners and IT in identifying technology and technical information that falls under U.S. export laws.
7) Verify Non-US Person resources (contractors and employees) hiring/onboarding qualification by confirming with leadership whether access to Export Controlled technical data is required.
8) In-take Non-US Persons’ visitation requests and approve their access to APS facilities.
9) Coordinate with internal and external legal counsel to determine appropriate paths forward when sharing Export Controlled technical data with Non-US Persons.
10) Provide comments/feedback in contract negotiation process for export compliance-related terms and conditions.
11) Create and provide regulatory-required reporting to the U.S. Department of Energy.
12) Participate in vendor risk management processes to assess vendors who will be in possession of APS sensitive information.
13) Assist in cybersecurity and data protection awareness efforts to educate APS workforce on safe data use and handling.
14) Utilize systems that help prevent inadvertent over-sharing of data classified as confidential and above, operating as the subject matter expert concerning Technical Controlled Data.
15) May help train and assist entry level employees.
