IT Networking & Information Security Compliance Administrator

About the role: Eagle Creek Renewable Energy is seeking an experienced IT Networking & Information Security Compliance Administrator. This hybrid role combines hands-on network administration and IT helpdesk support with responsibility for safeguarding our regulatory standing and the security of critical generation assets across our hydropower fleet. The ideal candidate has practical experience supporting enterprise and operational technology (OT) networks and can translate complex regulatory requirements — especially NERC CIP and NIST — into clear, well-documented controls. What You’ll Do: Monitor networks and systems for security breaches or suspicious activity; investigate incidents and produce detailed reports. Track new and revised NERC standards and FERC orders; perform gap analyses and translate changes into actionable requirements. Develop, maintain, and test internal controls and policies; keep documentation audit-readyAdminister and troubleshoot LAN/WAN infrastructure, including switches, routers, firewalls, wireless access points, and VPN concentrators. Manage IT and OT network infrastructure at hydropower facilities, ensuring high availability and reliability. Implement network security controls (ACLs, segmentation, IDS/IPS) and support vulnerability scanning and remediation. Review proposed system and infrastructure changes for security, compliance, and architectural impactProvide Tier 1/Tier 2 support for hardware, software, network connectivity, VPN, and remote access issues. Maintain accurate ticket documentation and contribute to knowledge base articles What Skills and Experience You’ll Need: Education and Experience:Bachelor’s degree in information security, information systems, computer science, engineering, or a related field, or equivalent experienceProven experience in regulatory compliance, audit, GRC, or internal controls, ideally in electric utility, energy, or another regulated or critical-infrastructure environmentWorking knowledge of the NERC CIP compliance lifecycle, including self-certification, self-reporting, mitigation, and auditHands-on experience in network administration and/or IT support, ideally in a multi-site or critical-infrastructure environmentRegulatory compliance/audit experience is a plus; working knowledge of the NERC CIP compliance lifecycle is a strong plusStrong practical skills with network hardware/software (Cisco, Palo Alto, Fortinet or similar), TCP/IP, VLANs, routing, switching, firewalls, VPNs, and wirelessCommunication and Collaboration:Strong written communication and documentation discipline to produce audit-ready evidence and clear compliance reportingAbility to collaborate and work cross-functionally with teams such as IT, operational technology, physical security, legal, and managementCertifications (preferred): CompTIA Network+/Security+, Cisco CCNA/CCNP, and/or NIST/NERC CIP-related training