Compliance Spec Nerc O&P And Cip Senior-Princ

GRADE LEVEL:  54-55

DEPARTMENT: NERC CIP COMPLIANCE

STARTING SALARY: $89,500-$143,588     Salary is commensurate with experience.     

JOB FAMILY SUMMARY PURPOSE:  

Under the supervision of the Manager of NERC Reliability and Critical Infrastructure Protection (CIP) & NERC Compliance is responsible for providing leadership, independent compliance oversight, guidance, training, auditing and overall direction necessary to maintain ongoing compliance with the NERC Operations & Planning (O&P) and Critical Infrastructure Protection (CIP) standards and requirements, and support and maintenance of EPE’s NERC Reliability Standards Compliance Program to support the reliable operation of EPE’s portion of the Bulk Electric System.

EDUCATION:

• Bachelor’s degree or higher in Engineering, Computer Science, Information Technology, Information Systems, Business Administration; or equivalent combination of related education, training and experience.

EXPERIENCE:

• 5 or more years experience

   

  Preferred Qualifications include:

• NERC System Operator Certification

• Certified Information System Security Professional (CISSP)

• GIAC Critical Infrastructure Protection Certification

• GIAC Industrial Security Certification

MINIMUM KNOWLEDGE, SKILLS & ABILITIES: 

1. Critical Thinking and Decision-Making.

2. Deep knowledge of regulatory compliance in the electric utility industry, subject to compliance standards and requirements.

3. Proficiency in the development of policies, procedures, processes and workflows

4. Knowledge of project management principles and methods.

5. Ability to effectively manage concurrent projects and tasks.

6. Ability to research and analyze complex technical data to arrive at a conclusion.

7. Excellent verbal, communication skills and presentation skills.

8. Must be self-starting, willing and able to work independently within a corporate organization and work subject to deadlines and expectations.

9. Effectively manage multiple concurrent projects and tasks.

10. Ability to work effectively within a team environment and on project teams.

11. Excellent analytical, verbal, written communication and documentation skills required, with demonstrated attention to detail.

12. Strong interpersonal and conflict resolution skills.

13. Self-motivated, problem-solving skills and the ability to influence others without direct authority.

ESSENTIAL JOB FUNCTIONS:

1. Supports applicable business units within EPE in identifying, assessing, managing, and reporting of compliance with the NERC O&P and CIP Standards.

2. Prepares coordinates and supports compliance audits conducted by internal resources, third party consultants, or external regulatory organizations.

3. Participates in NERC/WECC, and industry related compliance committees.

4. Remains current with all FERC, NERC, and WECC reliability standards development and implementation.

5. Leads and participates in training business units on all NERC O&P and CIP reliability standards and compliance tools, compliance tracking software and electronic document databases.

6. Develops and provides training to applicable business units on NERC O&P and CIP reliability standards and requirements.

7. Produces metrics used to develop periodic reports for executive management.

8. Participates in scheduled NERC/WECC on-site audits, spot checks, and investigations.

9. Provides technical direction, guidance, and oversight regarding O&P and CIP compliance efforts.

10. Performs internal O&P and CIP audits, monitoring, generates variance reports. 

11. Drafts self-reports, mitigation plans, and remediation efforts.

12. Remains informed about current NERC O&P and CIP reliability standards development and implementation.

13. Trains applicable business units on compliance software tools.

14. Provides compliance with recommendations on design and development of system implementations.

15. Provides compliance recommendations on disaster recovery plans, incident response plans, coordinates, and participates in exercises, and actual events.

16. Works with vendors, internal and external technology groups to resolve compliance related technical challenges.

17. Conducts routine hardware and software audits of all supported systems to ensure compliance with established standards, policies, procedures, and requirements.

18. Validates policies, procedures, and documentation as they relate to NERC O&P and CIP standard and other regulatory compliance requirements.

19. Develops audit conclusions; generates recommendations for process improvements; prepares written reports and written/oral presentations; supervises conduct of selected projects; and provides onsite technical and administrative direction/training.

20. Complies with all applicable Company policies, procedures, and code of ethics as well as all applicable governmental laws and regulations to include employment, safety and environmental standards and regulations.

21. Performs other related tasks that are not included but are within the context of the duties defined.