Apply on Employer Site

Seminole Electric Cooperative, Inc. · 1 day ago

SENIOR NERC CIP COMPLIANCE SPECIALIST

Tampa, FL

Full-time

Onsite

Mid, Senior Level

4+ years exp

Seminole Electric Cooperative, Inc. is seeking a Senior NERC CIP Compliance Specialist to join their regulatory compliance team. This role is responsible for the development, implementation, monitoring, and management of Seminole’s NERC compliance program, ensuring adherence to regulatory standards and providing guidance to Subject Matter Experts.

Consumer ElectronicsElectronicsEnergy

Responsibilities

Guides SMEs in the development and implementation of compliance processes and procedures

Develops internal processes and controls to achieve and sustain compliance with all applicable NERC Reliability Standards, FERC Standards of Conduct, and market manipulation training requirements

Completes internal activities relating to initiation and implementation of program changes

Assists in the development and maintenance of relevant training materials for compliance program

Provides training and direction to personnel in order to maintain an environment of continuous improvement

Oversees, Coordinates, and/or Manages: the non-compliance process to document non-compliance to NERC standards, coordinates the evaluation of each occurrence, and tracks the implementation of corrective action

Regulatory audit preparation activities to include preparation, critique and validation of reliability standard audit worksheets (RSAW's) and periodic updates

All on and off-site activities for self-certifications, audits, and cyber vulnerability assessments through the collection of documents and evidence and interaction with regulatory personnel

Response and action items required to ensure audit and cyber vulnerability assessment findings, and non-compliance suspense dates and required regulatory submittals are met

The storage of required NERC compliance documentation and evidence to ensure the material is available and follows BES Cyber System Information requirements

Balloting reviews for new and revised NERC Reliability Standards

Presents updates to leadership on the status of programs, plans, reports, and related documents

Establishes and maintains effective relationships with local industry, regional entities and internal stakeholders to allow for effective achievement of business goals and compliance with program requirements

Monitors NERC Reliability Standards as well as SERC Compliance Monitoring and Enforcement Program (CMEP), to ensure Seminole remains in compliance with regulatory requirements

Participates in the NERC Standards Development Process as necessary to ensure Seminole’s interests are addressed when existing standards are revised, or new standards are proposed

Reviews correspondence from NERC, SERC, and industry groups to gain understanding of compliance program and appropriate electric utility industry regulatory requirements

Performs other duties as applicable to the position or as assigned

Performs NERC Compliance Program roles if/as designated in Seminole's Standard Ownership Matrix (SOM) including ongoing evidence retention in 'audit-ready' form

Qualification

NERC CIP ComplianceCyber SecurityAuditingRisk ManagementElectric UtilitiesNERC Reliability StandardsChange ManagementIncident ReportingBusiness ContinuityDisaster RecoveryMicrosoft OfficeMultitaskingData InterpretationProject InitiationSelf-DirectionEffective CommunicationPresentation Skills

Required

Bachelor's degree in Computer or Information Sciences, Cyber Security, Electrical Engineering, Mechanical Engineering, Business Administration or Process Management, Auditing, or Risk Management

Desire four (4) - six (6) years' experience in two of the following: NERC CIP Compliance, Information Technology (IT), Cyber Security or comparable experience with emphasis on technical and security domains, Auditing or Risk Management, Electric Utilities experience subject to NERC Standards

Demonstrated experience of sufficient knowledge of: NERC CIP Reliability Standards, auditing procedures and risk management, change management, incident reporting and response planning, developing, implementing, and maintaining processes, procedures, and evidence, business continuity processes and disaster recovery, basic enterprise cyber security principles, system operator protocols, Transmission, Generation, Distribution, or Energy Management Systems

Proficiency with Microsoft Office applications

Effective verbal/nonverbal, listening and written communications

Proficient writing and presentation skills

Ability to multitask and manage multiple priorities to meet multiple deadlines

Ability to direct program work and lead cross-functional team efforts as necessary

Ability to direct compliance teamwork during absence of Regulatory Compliance Management

Ability to interpret data and produce informative reports

Ability to initiate projects as required

Be self-directed, originate new ideas, and able to present methods to others

Must be able to follow established protective measures including wearing required personal protective equipment (PPE)

Must have a valid driver's license and be able to maintain an acceptable motor vehicle report

Must be able to lift 25 pounds if needed