IT Cybersecurity Specialist

Description

DREMC is seeking an IT Cybersecurity Specialist

BE A PART OF POWERING SOUTHERN MIDDLE TENNESSEE! 

Duck River Electric Membership Corporation (DREMC) is a member-owned electric cooperative, serving an area of approximately 2,500 square miles across 17 counties in southern middle Tennessee. Our amazing team at DREMC distributes safe and reliable electricity at the lowest possible cost, promotes and facilitates economic development, and enhances the quality of life of over 87,000 members (and growing) across 6,500 miles of line.

Location: Shelbyville, TN

Job purpose:
The IT Cybersecurity Specialist is responsible for the protection, monitoring, and continuous improvement of the Cooperative’s cybersecurity posture. This position serves as the primary hands on technical resource for cybersecurity operations, directly implementing and managing security controls that reduce risk, safeguard critical systems and data, and support regulatory, operational, and business requirements.

Job Dimensions: 

Internal Responsibility — Collaborates with internal departments and IT staff to ensure cybersecurity controls are effectively integrated into business operations, projects, and processes. Serves as a subject matter expert on cybersecurity risks, controls, and best practices while supporting business continuity and operational resilience.

External Responsibility — Coordinates with external vendors, service providers, auditors, and business partners regarding cybersecurity tools, assessments, and services. Provides technical oversight to help ensure external solutions and services align with the Cooperative’s cybersecurity standards, risk management objectives, and operational requirements.

PRINCIPAL ACCOUNTABILITIES

1. Plan, implement, manage, and continuously improve cybersecurity controls across networks, systems, endpoints, applications, and cloud services.

2. Monitor security tools and platforms to identify, investigate, and respond to cybersecurity threats and incidents.

3. Administer and support security technologies, including firewalls, endpoint protection, identity and access management, vulnerability scanning, and logging/monitoring solutions.

4. Conduct regular risk assessments, vulnerability assessments, and security reviews; coordinate remediation efforts with IT staff and vendors.

5. Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security baselines aligned with industry best practices.

6. Maintain accurate and current cybersecurity documentation, including incident reports, risk assessments, and security architecture diagrams.

7. Support cybersecurity incident response activities, including investigation, containment, recovery, and post-incident analysis.

8. Apply and promote cybersecurity frameworks and best practices, including the NIST Cybersecurity Framework and CIS Controls, when implementing and evaluating security controls.

9. Support disaster recovery, business continuity, and data protection initiatives from a cybersecurity perspective.

10. Evaluate and recommend cybersecurity tools, technologies, and process improvements in alignment with organizational objectives.

11. Review proposed technology solutions, projects, and system changes to ensure cybersecurity requirements are properly considered and implemented.

12. Communicate cybersecurity risks and recommendations clearly to technical and non-technical stakeholders.

13. Develop and support cybersecurity awareness and training initiatives to promote a culture of security throughout the Cooperative.

14. Special projects as assigned.

15. Emergency response coverage as needed.

MINIMUM REQUIREMENTS

Education and Experience — Bachelor’s degree from an accredited college or university in computer science, information technology (IT), management information systems (MIS) or a related field and five (5) years of experience as a Cybersecurity Specialist or related role.

Experience in Lieu of Education — Thirteen (13) years of experience as a Cybersecurity Specialist or related role.

Certification/License, etc. — Industry certifications such as CompTIA Security+, ISC2 CISSP, ISACA CISM, EC-Council CEH, or equivalent are preferred. Must possess or be able to obtain a valid Tennessee Driver’s License. Must be eligible and remain insured as a driver by the Cooperative’s group liability policy for the automotive fleet.

Knowledge/Skills/Abilities — Knowledge of current cybersecurity threats, trends, and defensive techniques. Strong understanding of network security, endpoint security, identity and access management, and security monitoring concepts. Experience with cybersecurity documentation, policies, risk assessments, and vulnerability management. Familiarity with cybersecurity frameworks and standards such as the NIST Cybersecurity Framework. Familiarity with LAN, WAN, cloud, and mobile-based systems. Ability to analyze security data and respond effectively to incidents. Possess effective oral and written communication skills. Ability to prioritize, manage multiple tasks, and meet deadlines.

Physical Requirements — Frequently required to sit for extended periods while working on a computer or reviewing systems data. Regular use of hands and fingers for typing and handling documents or technical tools. Visual acuity required to read and interpret complex spreadsheets, reports, and system dashboards. Must be able to communicate clearly and effectively in person, over the phone, and in written communications. Occasionally required to stand, walk, bend, or lift up to 50 pounds (such as laptops, network hardware, backup batteries). May require extended focus and concentration when analyzing data or configuring systems.

Work Environment — Work is primarily performed in a quiet, professional office environment with standard climate control and lighting. The position requires frequent use of computers, cybersecurity monitoring platforms, network management tools, phones, and office equipment. Occasional meetings with internal departments may take place in person or virtually. Limited travel may be required for training, vendor meetings, or collaboration with other office locations. Work may involve periods of increased pressure during reporting cycles, audits, or system implementation phases. 

This job description is intended to identify the essential functions of a position and should not be interpreted as all-inclusive. An employee may be required to perform other reasonably related business duties as assigned by immediate supervisor and/or management as needed. DREMC reserves the right to revise or change the job description as the need arises, or work schedules based on their duty to accommodate individuals with disabilities. This job description does not constitute a written or implied contract of employment.

EEOC: 2-PROFESSIONAL | Non-Supervisory | Pay Grade: 13 | Exempt | No residency requirement 

Position description effective date: August 2026

BENEFITS: DREMC provides a comprehensive program of employee benefits, including group medical, dental, vision, employer-sponsored medical clinic, life and long-term disability insurance programs, defined benefit retirement and 401K savings plans, and tuition reimbursement.

Qualified candidates should apply at www.dremc.com under careers. Candidates must submit a cover letter, resume and complete application form to be considered. 

DREMC does not accept resumes from third-party recruiters. Equal Opportunity Employer EOE/AA M/F/D/V