Cyber Compliance Specialist

Applications will be accepted through May 14, 2025 - Apply on-line at www.wfec.com

SUMMARY: Under the general supervision of the Manager, IT Infrastructure, the Cyber Compliance Specialist ensures compliance with reliability regulations relating to WFEC's cyber critical assets and other cyber assets and the application of WFEC's reliability compliance program in those areas. The incumbent will assist in developing, implementing, reviewing, updating, and documenting the reliability compliance program. The incumbent will perform technical work related to cyber security and compliance efforts and work closely with compliance and security staff in both a technical and compliance role. By working closely with department personnel, the incumbent will provide direct functional guidance on work processes necessary to ensure compliance. In addition, the incumbent will act as the subject matter expert in the compliance area by maintaining a current working knowledge of regulatory standards and how they apply to WFEC's operations while establishing and maintaining a high degree of technical knowledge in cyber security. The incumbent will coordinate the department's compliance efforts with other departments as part of the WFEC's overall reliability compliance program.

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned. Maintains a working knowledge of the North American Reliability Corporation (NERC), Southwest Power Pool (SPP), Midwest Reliability Corporation (MRO), Rural Utility Service (RUS), and Critical Infrastructure Protection (CIP) standards or other applicable governmental rules, standards, regulations or requirements related to reliability or security compliance. Assists with the development, implementation, documentation, and modification of operations procedures and processes to ensure that WFEC is compliant with all national Federal Energy Regulatory Commission (FERC), NERC, RUS, and regional rules, standards, regulations, and requirements related to CIP. Assist WFEC's Compliance Officer and Compliance Team in coordinating internal audits on a regular basis. Assist the Information Security Team in daily security operations, to include, but not limited to, system monitoring, triaging of security events, tuning of security systems, and other security tasks on a regular basis. Assist the Information Security and Compliance Team in compliance efforts on a regular basis. Work as a cross-functional Compliance Team member under the leadership of the Compliance Officer to assist in implementation of WFEC's compliance processes and procedures. Provides advice, direction, and support both orally and in writing to operations personnel regarding the applicability and meaning of reliability compliance requirements. Perform technical compliance duties that includes, but is not limited to, Security Controls Testing, permission verification, compliance data extraction, and system architecture verification. Monitors department compliance and identifies compliance issues requiring mitigation. Reviews existing processes and procedures, prepares mitigation plans, and implements plans to ensure future compliance. Acts as the department contact point for compliance audits conducted by internal or outside entities. Develops and maintains compliance related documentation process and ensures that compliance related records and activities are documented as required. Develops and maintains technical related documentation. Develops and presents compliance training and compliance awareness programs for department employees and others. Identify and report any actual or potential compliance violations and provide information and implement remedial procedures required during the investigation and resolution of any actual or potential violation findings. Develops and prepares periodic reports regarding compliance and technical issues and the compliance and technical status. Notifies the department manager and compliance personnel regarding situations involving potential compliance violations or situations requiring a compliance response. Coordinates compliance activities with compliance employees in other departments to ensure a uniform compliance approach and standardized compliance processes within WFEC. Uses computer software to gather, analyze, and present operational data for compliance and technical objectives. Attends meetings and conferences on compliance and cyber security as a representative of WFEC. Attends training on developing compliance issues, compliance audits, technical knowledge, and system reliability.

COMPETENCIES: To perform the job successfully, an individual should demonstrate the following competencies:

Adaptability: Able to deal with frequent change, delays, or unexpected outcomes; Adapts to changes in the work environment; Changes approach or method to best fit the situation; Manages competing demands.

Analytical: Collects and researches data; Designs workflows and procedures; Synthesizes complex or diverse information; Uses experience to complement data.

Cost Consciousness: Conserves organizational resources; Develops and implements cost saving measures; Works within approved budget.

Customer Service: Manages difficult or emotional customer situations; Meets commitments to Customers; Responds promptly to customer needs; Responds to requests for service and assistance; Solicits customer feedback to improve service.

Oral and Written Communication: Able to read and interpret written information; Demonstrates group presentation skills; Listens and gets clarification; Participates in meetings. Presents numerical data effectively; Responds well to questions; Speaks clearly and persuasively in positive or negative situations; Varies writing style to meet needs; Writes clearly and informatively.

Planning/Organizing: Develops realistic action plans; Prioritizes and plans work activities; Sets goals and objectives; Uses time efficiently.

Problem Solving: Develops alternative solutions; Gathers and analyzes information skillfully; Identifies and resolves problems in a timely manner; Uses reason even when dealing with emotional topics; Works well in group problem solving situations.

Professional Knowledge: Generates creative solutions; Pursues training and development opportunities; Shares expertise with others; Strives to continuously build knowledge and skills; Translates concepts and information into applications; Uses feedback to modify recommendations.

Professionalism: Accepts responsibility for own actions; Approaches others in a tactful manner; Follows through on commitments; Reacts well under pressure; Treats others with respect and consideration regardless of their status or position.

Teamwork: Able to build morale and group commitments to goals and objectives; Balances team and individual responsibilities; Exhibits objectivity and openness to others' views; Gives and welcomes feedback; Supports everyone's efforts to succeed.

QUALIFICATIONS: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the education, experience, knowledge, skills, abilities, and behaviors required.

Education and Experience: A Bachelor's degree in a related technology or cyber security field and six years of directly related experience within an electric utility, technology, or cyber security field Demonstrated ability to research and interpret technical regulations, government documents, legal briefs, engineering related correspondence, cyber security best practices, and other high-level materials is required.

Language Skills: Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from employees, managers, and senior staff.

Mathematical Skills: Ability to work with mathematical concepts such as probability and statistics. Ability to apply concepts such as fractions, percentages, ratios, and proportions to practical situations.

Reasoning Ability: Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram, or schedule form.

Computer Skills: In addition to the qualifications listed above, knowledge and experience using Microsoft Office products including Word and Excel is required. Computer and other cyber protection system certifications are preferred.

CERTIFICATES, LICENSES, REGISTRATIONS: Requires a current commercial driver's license. Computer and other cyber security certifications, such as CISSP, are preferred.

WORK SCHEDULE REQUIREMENTS: Normally works a weekday schedule, but may be required to work evenings, holidays, or weekends. May be required to work differentiated 8-hour work schedule between 8:00 am to 7:00 pm. May be required to travel on short notice.

PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to sit and talk or hear. The employee is frequently required to use hands to finger, handle, or feel and reach with hands and arms. The employee is occasionally required to stand and walk. The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, distance vision and color vision.

WORK ENVIRONMENT: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The employee generally works in an in-door environment. The noise level in the work environment is usually quiet. In accordance with WFEC Administrative Procedure 805-Alcohol and Drug-Free Workplace this position is classified as "safety sensitive".

MUST MEET ALL PHYSICAL AND ENVIRONMENTAL REQUIREMENTS

WFEC IS AN EQUAL OPPORTUNITY PROVIDER AND EMPLOYER

MINORITIES, FEMALES, DISABILITY, AND

VETS ARE ENCOURAGED TO APPLY

EOE/AA/M/F/DISABILITY/VETS