Manager, CIP Compliance
Posted 11hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
CIP compliance manager leading NERC monitoring, audits, and risk-based programs for NPCC’s electric utility stakeholders. Supervising teams and coordinating regulatory engagements across the United States and Canada.
Responsibilities:
- Lead and oversee Critical Infrastructure Protection (CIP) compliance monitoring activities within NPCC’s Compliance Monitoring and Enforcement Program
- Manage CIP compliance monitoring engagements across the United States and Canada
- Supervise, coach, and develop CIP compliance monitoring staff
- Establish, maintain, and continuously improve processes supporting CIP compliance audits, self-certifications, spot checks, and other monitoring activities
- Review and update processes based on NERC Rules of Procedure, CMEP guidance, FERC Orders, Canadian agreements, emerging risks, and ERO Enterprise initiatives
- Support risk-based monitoring by evaluating entity risks, internal controls, compliance history, and other risk indicators
- Assist with annual monitoring plans, strategies, documentation, records, metrics, and KPIs
- Serve as Audit Team Lead by directing audit activities, coordinating resources, facilitating discussions, reviewing work products, and ensuring engagement quality
- Develop risk-informed compliance monitoring scopes
- Review workpapers, engagement documentation, reports, and compliance monitoring deliverables
- Ensure engagements meet timelines and milestones, including evidence submissions, interviews, site visits, reporting, comment periods, and final report issuance
- Identify CIP compliance trends, emerging risks, and industry developments; contribute to lessons learned, outreach materials, and analytical reports
- Support recruitment, interviewing, selection, onboarding, training, succession planning, and employee development
- Build relationships with Registered Entities, NERC, Regional Entities, and other industry stakeholders
- Facilitate discussions regarding audit scope, evidence requests, internal controls, results, and continuous improvement
- Develop and deliver training, education, outreach, and communications
- Represent NPCC on ERO Enterprise committees, task forces, working groups, and special projects
- Perform other assigned duties and special projects
Requirements:
- Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, Cybersecurity, or a related technical field and ten (10) or more years of relevant industry experience; or an equivalent combination of education and experience demonstrating the ability to perform the essential functions of the position
- Minimum ten (10) years of experience in the electric utility industry or a related technical field
- Experience in desktop and systems design
- Experience evaluating compliance programs, internal controls, risk mitigation practices, or governance processes associated with NERC Reliability Standards
- Ability to analyze compliance monitoring results, identify trends, and develop recommendations and reports
- Preferred: Master’s degree in a related field
- Preferred experience managing compliance monitoring under delegated regulatory authority
- Preferred experience with Canadian provincial reliability agreements, memoranda of understanding, or cross-border regulatory frameworks
- Preferred proficiency in the NP-View network analysis tool
- Preferred experience with risk-based compliance monitoring and internal-controls evaluation
- Preferred certifications include CISSP, CISA, CISM, GCIP, PMP, CIA, or other relevant professional certifications or licenses
- Strong leadership, supervisory, coaching, mentoring, analytical, problem-solving, critical-thinking, project-management, organizational, and prioritization skills
- Advanced proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, and Teams
- Ability to lead cross-functional and virtual teams
- Ability to work and travel within the U.S. and travel to Canada
- Prolonged periods of working on a computer
Benefits:
- Equal Opportunity Employer
- Remote work location
- Travel to main office and in-person meetings as required
- Professional development opportunities
- Training, succession planning, and continuous development initiatives



















