Critical Infrastructure Protection Enforcement Analyst

Overview

The Critical Infrastructure Protection (CIP) Enforcement Analyst investigates, analyzes, and prepares dispositions for noncompliance of Critical Infrastructure Protection (CIP) NERC Reliability Standards. This person also provides technical expertise in cybersecurity and CIP issues and works with other ERO Enterprise staff, registered entities, and regulators to support a highly reliable and secure North American Bulk Power System.

Responsibilities

- Articulate the facts and circumstances, extent, and cause of each noncompliance and ensure the noncompliance disposition ties to the NERC Reliability Standard requirement.

- Assess the risk of each noncompliance and ensure the disposition appropriately and thoroughly describes the risk.

- Review mitigation and/or work with entity to develop mitigation for each noncompliance so that each noncompliance is corrected, and the mitigation prevents recurrence.

- Verify mitigation is completed through a review and documentation of mitigation evidence.

- Triage incoming noncompliance to identify violation facts, preliminary risk assessment, and complexity of the noncompliance.

- Develop risk criteria to evaluate the potential impact and likelihood of impact the noncompliance has on the BPS.

- Participate in NPCC and ERO Enterprise meetings, workshops, task forces, committees, and forums, as assigned.

- Assist in developing responses to oversight of NPCC.

- Develop and/or amend policies and procedures.

Experience

- Bachelor’s degree in Cybersecurity, Information Systems, Computer Engineering, or other relevant Bachelor’s degree.

- 3 or more years’ experience associated with computer systems used in the electric utility industry; or 3 or more years of experience in securing computer systems, including both physical and electronic security; or 3 or more years of experience working within an electric utility Control Center or Regulatory IT role.

- One or more of the following certifications preferred:

o CompTia Security+

o CompTia Network+

o CompTia CySa+

o GIAC Security Essentials (GSEC)

FUNCTIONAL COMPETENCIES

- Ability to effectively communicate technical concepts to non-experts verbally and in writing

- Excellent organizational skills and ability to prioritize and to manage multiple assignments concurrently.

- Strong questioning attitude and attention to detail

- Strong analytical and problem-solving skills.

- Strong interpersonal and conflict resolution skills.

- Ability to mentor others

- Ability to learn and work in a variety of portals, software, and databases.

- Proficient with Microsoft Office Suite or related software.

Join us in this exciting opportunity where your analytical skills will contribute significantly to our mission of promoting and enhancing the reliability of the international interconnected bulk power system in Northeastern North America.

Job Type: Full-time

Pay: $100,000.00 - $115,000.00 per year

Benefits:

- 401(k)

- 401(k) matching

- AD&D insurance

- Dental insurance

- Disability insurance

- Employee assistance program

- Flexible schedule

- Flexible spending account

- Health insurance

- Life insurance

- Paid sick time

- Paid time off

- Parental leave

- Tuition reimbursement

- Vision insurance

- Wellness program

Work Location: Remote