IT Compliance Program Manager

Job Specifications Black Hills Energy is people powered and purpose driven. Our team uses the power of energy to improve life for over one million customers in 800+ communities across the West and Midwest. We seek talented, caring people who embody our core values and contribute to a culture of inclusion and growth. As an organization, we believe the best part of working on our team is our commitment to making tomorrow better than today—for our customers, communities and each other.

Position Summary

This position is responsible for developing and implementing an effective IT compliance program which includes creating policies, procedures, and guidelines that comply with applicable regulations such as TSA Security Directives/Guidelines, NERC CIP, and SOX and align industry best practices.

Pay Range:

$94,800 - $156,250 (This posting includes the full pay range for this position. Pay is based on a number of factors and may vary depending on job-related knowledge, skills, experience, and internal equity.)

Reporting Relationship:

Senior Manager, IT Compliance

Location:

Rapid City, South Dakota; Lakewood, Colorado or Council Bluffs, Iowa

Essential Functions

- Plan program execution and monitoring of IT compliance activities including complex audits, analysis, remediation throughout BHE, and supporting internal and external audit teams as required.

- Review compliance evidence and provide direction and coaching to teams to ensure that compliance results are documented comprehensively, clearly, concisely, and in an organized manner.

- Coordinate, communicate and monitor internal IT compliance activities including data collections, analysis, and remediation throughout the company, working with internal and external audit as required.

- Manage program success by supporting, training, and mentoring compliance specialists and other IT departments to monitor IT systems and processes to identify any potential non-compliance issues and take corrective actions when necessary.

- Motivate individuals and teams by developing effective relationships, effectively communicating, being a positive role model, and maintaining a positive and productive work environment.

- Design communication and training on IT compliance related issues and activities. Develop and maintain partnerships within the organization to build IT compliance awareness and conformity

- Prepare and present regular reports on IT compliance activities, progress, and potential risks to senior management and relevant stakeholders. Maintain accurate and detailed documentation of compliance related activities, audits, and remediation actions.

- Be engaged in industry forums and venues related to various Compliance topics; make recommendations to management at all levels to ensure that appropriate levels of compliance is maintained.

Additional Responsibilities

- Maintain professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies.

- Oversee IT compliance program related projects to ensure they will meet project timeline and budget.

- Support department administrative tasks and special projects as requested or appropriately delegate tasks including but not limited to preparing materials for management.

What Is Required

- Bachelor's Degree in IT, Business Administration, Compliance, Risk, Security, Information Technology, or similar role or equivalent combination of education and experience

- Minimum of 5 years of experience in information technology, compliance, audit or similar role.

- Extensive experience applying IT-related knowledge and experience in solving compliance issues.

- Extensive experience in planning, organizing, and developing information technology policies, procedures, and practices.

- Must be able to obtain CISA certification upon hire.

What Is Desired

- Expert knowledge and understanding of Information Technology concepts and IT security controls, and processes. Ability to understand, comprehend and communicate technology. Demonstrated understanding of data processing, hardware platforms, operating systems, databases and enterprise software applications.

- Expert knowledge and understanding of Information Technology concepts and IT and Business security controls, and processes. Ability to understand, comprehend and communicate technology. Demonstrated understanding of data processing, hardware platforms, operating systems, databases and enterprise software applications.

- Expert knowledge of applicable state and federal regulations, including Sarbanes Oxley, NERC CIP requirements and TSA guidelines.

- Must be ambitious, enthusiastic, and a self-starter. Demonstrate enthusiasm on the job and a willingness to accept job responsibilities and new assignments.

- Teamwork – ability to work as part of a group to accomplish shared objectives and goals.

This description is not intended to be an all-inclusive list of responsibilities, duties, and requirements for employees in this position. Job descriptions may and do change periodically. Where positions are covered by a collective bargaining unit agreement, the terms and conditions of the agreement will apply.

About our Company:

We are a customer, growth and safety focused utility company that is dedicated to our communities. We improve life with energy as an energy partner of choice. Our diverse culture fuels unique perspectives, opening doors to new insights and possibilities. Based in Rapid City, South Dakota, we have over 3000 employees and serve 1.3 million natural gas and electric utility customers across eight states (South Dakota, Montana, Wyoming, Colorado, Nebraska, Iowa, Kansas, and Arkansas).

Enjoy our Comprehensive Benefits Package!

Annual discretionary bonuses, 401(k) (6% company match and up to 9% company retirement contribution), tuition reimbursement, generous paid time off benefits, including paid holidays and parental leave, company paid life insurance and disability benefits (short and long term), an employee assistance program and well-being benefits, and competitive medical, dental and vision insurance.

Candidates must successfully pass a pre-employment drug screen and background check. If there is anything that may show up in these reports that may conflict with the position requirements, feel free to contact the Black Hills Energy recruiting team at jobs@blackhillscorp.com.

Black Hills Energy does not sponsor applicants for work visas. All applicants must be legally authorized to work in the US. We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or status as a protected veteran. If you require reasonable accommodation, please visit careers.blackhillsenergy.com for more information.