Manager, CIP Compliance

Posted 11hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

CIP compliance manager leading NERC monitoring, audits, and risk-based programs for NPCC’s electric utility stakeholders. Supervising teams and coordinating regulatory engagements across the United States and Canada.

Responsibilities:

  • Lead and oversee Critical Infrastructure Protection (CIP) compliance monitoring activities within NPCC’s Compliance Monitoring and Enforcement Program
  • Manage CIP compliance monitoring engagements across the United States and Canada
  • Supervise, coach, and develop CIP compliance monitoring staff
  • Establish, maintain, and continuously improve processes supporting CIP compliance audits, self-certifications, spot checks, and other monitoring activities
  • Review and update processes based on NERC Rules of Procedure, CMEP guidance, FERC Orders, Canadian agreements, emerging risks, and ERO Enterprise initiatives
  • Support risk-based monitoring by evaluating entity risks, internal controls, compliance history, and other risk indicators
  • Assist with annual monitoring plans, strategies, documentation, records, metrics, and KPIs
  • Serve as Audit Team Lead by directing audit activities, coordinating resources, facilitating discussions, reviewing work products, and ensuring engagement quality
  • Develop risk-informed compliance monitoring scopes
  • Review workpapers, engagement documentation, reports, and compliance monitoring deliverables
  • Ensure engagements meet timelines and milestones, including evidence submissions, interviews, site visits, reporting, comment periods, and final report issuance
  • Identify CIP compliance trends, emerging risks, and industry developments; contribute to lessons learned, outreach materials, and analytical reports
  • Support recruitment, interviewing, selection, onboarding, training, succession planning, and employee development
  • Build relationships with Registered Entities, NERC, Regional Entities, and other industry stakeholders
  • Facilitate discussions regarding audit scope, evidence requests, internal controls, results, and continuous improvement
  • Develop and deliver training, education, outreach, and communications
  • Represent NPCC on ERO Enterprise committees, task forces, working groups, and special projects
  • Perform other assigned duties and special projects

Requirements:

  • Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, Cybersecurity, or a related technical field and ten (10) or more years of relevant industry experience; or an equivalent combination of education and experience demonstrating the ability to perform the essential functions of the position
  • Minimum ten (10) years of experience in the electric utility industry or a related technical field
  • Experience in desktop and systems design
  • Experience evaluating compliance programs, internal controls, risk mitigation practices, or governance processes associated with NERC Reliability Standards
  • Ability to analyze compliance monitoring results, identify trends, and develop recommendations and reports
  • Preferred: Master’s degree in a related field
  • Preferred experience managing compliance monitoring under delegated regulatory authority
  • Preferred experience with Canadian provincial reliability agreements, memoranda of understanding, or cross-border regulatory frameworks
  • Preferred proficiency in the NP-View network analysis tool
  • Preferred experience with risk-based compliance monitoring and internal-controls evaluation
  • Preferred certifications include CISSP, CISA, CISM, GCIP, PMP, CIA, or other relevant professional certifications or licenses
  • Strong leadership, supervisory, coaching, mentoring, analytical, problem-solving, critical-thinking, project-management, organizational, and prioritization skills
  • Advanced proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, and Teams
  • Ability to lead cross-functional and virtual teams
  • Ability to work and travel within the U.S. and travel to Canada
  • Prolonged periods of working on a computer

Benefits:

  • Equal Opportunity Employer
  • Remote work location
  • Travel to main office and in-person meetings as required
  • Professional development opportunities
  • Training, succession planning, and continuous development initiatives