COMPLIANCE SPEC NERC O&P AND CIP SENIOR-PRINC

About the role

Under the supervision of the Manager of NERC Reliability and Critical Infrastructure Protection (CIP) & NERC Compliance, this role is responsible for providing leadership, independent compliance oversight, guidance, training, auditing and overall direction necessary to maintain ongoing compliance with the NERC Operations & Planning (O&P) and Critical Infrastructure Protection (CIP) standards and requirements. The position supports and maintains EPE’s NERC Reliability Standards Compliance Program to support the reliable operation of EPE’s portion of the Bulk Electric System.

Education

• Bachelor’s degree or higher in Engineering, Computer Science, Information Technology, Information Systems, Business Administration; or equivalent combination of related education, training and experience.

Experience

• 5 or more years of experience

Preferred Qualifications

• NERC System Operator Certification
• Certified Information System Security Professional (CISSP)
• GIAC Critical Infrastructure Protection Certification
• GIAC Industrial Security Certification

Minimum Knowledge, Skills & Abilities

• Critical thinking and decision-making
• Deep knowledge of regulatory compliance in the electric utility industry, subject to compliance standards and requirements
• Proficiency in the development of policies, procedures, processes and workflows
• Knowledge of project management principles and methods
• Ability to effectively manage concurrent projects and tasks
• Ability to research and analyze complex technical data to arrive at a conclusion
• Excellent verbal, written communication and presentation skills
• Self-starting with willingness and ability to work independently within a corporate organization and meet deadlines and expectations
• Ability to work effectively within a team environment and on project teams
• Strong interpersonal and conflict resolution skills
• Self-motivated, problem-solving skills and the ability to influence others without direct authority

Essential Job Functions

• Supports applicable business units within EPE in identifying, assessing, managing, and reporting compliance with the NERC O&P and CIP Standards
• Prepares, coordinates, and supports compliance audits conducted by internal resources, third-party consultants, or external regulatory organizations
• Participates in NERC/WECC and industry-related compliance committees
• Remains current with all FERC, NERC, and WECC reliability standards development and implementation
• Leads and participates in training business units on all NERC O&P and CIP reliability standards and compliance tools, compliance tracking software and electronic document databases
• Develops and provides training to applicable business units on NERC O&P and CIP reliability standards and requirements
• Produces metrics used to develop periodic reports for executive management
• Participates in scheduled NERC/WECC on-site audits, spot checks, and investigations
• Provides technical direction, guidance, and oversight regarding O&P and CIP compliance efforts
• Performs internal O&P and CIP audits, monitoring, and generates variance reports
• Drafts self-reports, mitigation plans, and remediation efforts
• Remains informed about current NERC O&P and CIP reliability standards development and implementation
• Trains applicable business units on compliance software tools
• Provides compliance recommendations on design and development of system implementations
• Provides compliance recommendations on disaster recovery plans, incident response plans, coordinates and participates in exercises, and actual events
• Works with vendors, internal and external technology groups to resolve compliance-related technical challenges
• Conducts routine hardware and software audits of all supported systems to ensure compliance with established standards, policies, procedures, and requirements
• Validates policies, procedures, and documentation as they relate to NERC O&P and CIP standards and other regulatory compliance requirements
• Develops audit conclusions; generates recommendations for process improvements; prepares written reports and written/oral presentations; supervises conduct of selected projects; and provides onsite technical and administrative direction/training
• Complies with all applicable Company policies, procedures, and code of ethics as well as all applicable governmental laws and regulations to include employment, safety and environmental standards and regulations