Brief Description
The
NERC CIP Compliance Specialistplays a critical role in ensuring full compliance with NERC Critical Infrastructure Protection (CIP) cybersecurity standards and supporting broader corporate cybersecurity initiatives. This position works closely with site Subject Matter Experts (SMEs), operations leaders, and corporate compliance personnel to maintain consistent, audit-ready evidence and a secure Bulk Electric System (BES) environment.
Key responsibilities include internal compliance assessments, Cybersecurity Incident Response drills, audit preparation and evidence validation, corrective action tracking, and support for continuous improvement across all assigned sites.
Essential Duties And Responsibilities
- Monitor and validate compliance with FERC and NERC CIP requirements across assigned sites, including evidence management, self-certifications, spot checks, data submissions, and mitigation plan support.
- Conduct internal site compliance assessments to verify evidence accuracy, investigate potential issues, and ensure audit readiness at all times.
- Collaborate with the NERC CIP Director, CIP Senior Managers, and Compliance peers to develop, refine, and maintain the company’s NERC CIP compliance framework.
- Review daily CIP compliance tasks within compliance-tracking software; provide actionable feedback to SMEs and stakeholders.
- Lead or support Cybersecurity Incident Response drills, tabletop exercises, and awareness training.
- Deliver ongoing regulatory and cybersecurity training to station personnel and SMEs.
- Work independently or collaboratively on compliance initiatives, providing value-added insights and improvements.
- Support cross-functional cybersecurity initiatives as needed.
- Perform other duties as assigned.
- Bachelor’s degree in a related field or equivalent industry experience.
- Demonstrated experience with NERC CIP standards and operational cybersecurity requirements.
- Strong technical proficiency, including Microsoft Office, document management tools, and compliance-tracking systems.
- Ability to pass and maintain a 7-year background check, personal risk assessment, and clean driving record as required under NERC CIP.
- Ability to travel 25–35% to conduct assessments (air, rental vehicles, industrial facility access).
- Ability to work in industrial environments involving PPE, climbing, bending, and exposure to plant conditions.- CompTIA Security+, Network+, or similar cybersecurity certifications.
- Knowledge of IT, networking, ICS/SCADA/PLC/DCS systems.
- Experience with power plant operations, utility compliance, renewable or conventional generation assets.
- Strong analytical, documentation, and problem-solving skills.
- High attention to detail, adaptability, and the ability to manage multiple priorities.
- Excellent written and verbal communication abilities.
Summary
Applicants must possess a
valid driver's licenseand maintain a clean driving record, as this position requires occasional travel for company business. Candidates should be comfortable operating a vehicle as part of their job responsibilities and must meet any applicable company and insurance requirements.
CAMS offers a variety of excellent benefits. Full-time employees are offered the following: medical, dental, vision, LTD, STD, and Life insurance plans. You can even select additional “al la carte” benefits to meet all your needs. You can also enroll in our 401k, flex spending accounts for medical and childcare needs, and participate in our employee referral and tuition reimbursement programs.
Qualified Applicants must be legally authorized for employment in the United States. Qualified Applicants will not require employer sponsored work authorization now or in the future for employment in the United States.
We believe in transparency and providing candidates with important information to make informed decisions. The salary range for this position is commensurate with experience, qualifications, and location. Actual compensation will be determined based on several factors, including but not limited to skills, experience, and relevant qualifications.
This range represents the base salary and does not include other forms of compensation, such as bonuses, benefits, or equity, which may be offered in addition to the base pay. The company reserves the right to modify compensation ranges at any time in accordance with business needs and market conditions.