Manager, Compliance and Critical Infrastructure Protection

About the role

The Manager, Compliance & Critical Infrastructure Protection (CIP) will provide leadership, governance, oversight and continuous improvement of the company’s enterprise-wide regulatory compliance and CIP programs.

Responsibilities

• Oversee corporate NERC and CIP compliance structures, processes, and program governance.
• Establish and maintain policies, procedures, and internal controls for effectiveness and alignment with regulatory requirements.
• Evaluate CIP cybersecurity and physical security programs and advise on enhancements to ensure alignment with regulatory requirements.
• Oversee compliance with Railbelt Reliability Council CIP and Reliability Standards and other applicable NERC and FERC requirements.
• Lead and manage audits, spot checks, and investigations.
• Oversee organizational readiness for audits, spot checks on existing procedures and policy, and investigations, and coordinate responses to regulatory inquiries.
• Review and evaluate regulatory documentation and evidence prepared by operational teams to ensure completeness and accuracy.
• Direct risk assessments and mitigation activities for BES Cyber Systems and advise on mitigation strategies to ensure alignment with CIP requirements.
• Monitor emerging threats and regulatory developments.
• Review cybersecurity and physical security incident response plans for compliance with applicable regulatory requirements.
• Assess alignment of OT and IT controls with applicable compliance standards and report findings to leadership.
• Advise operational technical teams on incorporating compliance and CIP requirements into operational planning and system lifecycle processes.
• Liaise with regulatory bodies and industry groups.
• Participate in Railbelt Reliability Council Standards development workgroups.
• Oversee development and delivery of CIP and Reliability Standards compliance training programs.
• Prepare and deliver reports to leadership and the Board of Directors.
• Lead internal self-assessments and mock audits.
• Oversee and evaluate compliance documentation systems and tracking tools for consistency and quality.

Requirements

Education: Bachelor’s degree in Engineering, Information Technology, Cybersecurity, Business or related field, required. Master’s degree, preferred.

Experience: Five (5) years of progressively responsible experience, including working in a lead or primary role in compliance, cybersecurity, operations, or risk management, required. Experience managing NERC Reliability Standards, NERC CIP programs, or RRC CIP cybersecurity standards, preferred. Experience leading audits, investigations, and assessments, preferred. Experience in a utility or union environment, preferred.

Qualifications

Competencies: Advanced knowledge of NERC Reliability and CIP Standards, FERC regulations, and regional requirements. Knowledge of cybersecurity principles, SCADA/ICS environments, and BES Cyber Systems. Proficiency with compliance tracking tools and documentation systems. Ability to identify sensitive or confidential information and abide by confidentiality requirements. Ability to perform in a fast paced and deadline-oriented environment. Ability to organize workflow, manage multiple priorities, and effectively utilize resources. Ability to apply tactical applications and decision making to long-term and strategic objectives. Effective verbal, written, and negotiation skills with the capability to clearly convey both technical and strategic information to various audiences. Proven ability to uphold ethical and professional conduct. Advanced knowledge of Microsoft Office applications.

Skills

Advanced knowledge of NERC Reliability and CIP Standards, FERC regulations, and regional requirements.

Knowledge of cybersecurity principles, SCADA/ICS environments, and BES Cyber Systems.

Proficiency with compliance tracking tools and documentation systems.

Ability to identify sensitive or confidential information and abide by confidentiality requirements.

Ability to perform in a fast paced and deadline-oriented environment.

Ability to organize workflow, manage multiple priorities, and effectively utilize resources.

Ability to apply tactical applications and decision making to long-term and strategic objectives.

Effective verbal, written, and negotiation skills with the capability to clearly convey both technical and strategic information to various audiences.

Proven ability to uphold ethical and professional conduct.

Advanced knowledge of Microsoft Office applications.

Benefits

HEALTH BENEFITS: Premium & Deductible are paid for by Chugach Electric. The plan includes coverage of: Medical, RX, Dental & Vision Health Savings Account (HSA)

FINANCIAL SECURITY: 401K Plan Defined Benefit (Pension) Retirement Investment services Basic Life and AD&D Insurance paid for by Chugach Electric Supplemental Life Insurance Short Term Disability Long Term Disability Flex Spending Account (Health, Limited Use, Dependent Care)

WORK, LIFE & HEALTH: 20 days vacation for first year of employment 10 Paid Holidays + 3 Float Holidays Employee Assistance Program MetLife Will Preparation