Be a Part of Something that Matters
At WECC, we enhance the lives of 90 million people by identifying and mitigating risks to the bulk power system in the West. As a Staff Compliance Auditor, you will make a difference by ensuring compliance with the North American Electric Reliability Corporation (NERC) Reliability Standards through partnership with registered entities in the Western Interconnection.
In your role as the Staff Compliance Auditor, you will satisfy the audit schedule requirements of the Entity Oversight Program according to NERC’s delegation agreement with WECC. In addition, this position is a central point for cross-functional work with the Entity Risk Assessment and Enforcement and Mitigation teams in WECC.
You will—
•Conduct comprehensive cybersecurity audits of critical electricity infrastructure throughout western North America following NERC’s CIP Standards.
•Evaluate entities’ strategies for cybersecurity.
•Audit how entities deploy technical networks.
•Create and give professional presentations at NERC/WECC outreach events.
•Develop and update compliance status report.
•Give SME and technical support to Entity Risk Assessment and Enforcement & Mitigation departments on self-reporting assessments and mitigation plan acceptance, including the review of evidence to confirm the entity’s return to compliance.
•Review mitigation plans and other mitigating actions taken by entities to restore compliance and reduce the likelihood of future noncompliance.
•Assist in the daily administration of the CMEP.
•Participate in ERO activities and working groups, as requested.
You will enjoy this role if you—
•You hold a bachelor’s degree in information systems, electrical engineering, or a related field; or you have an equivalent combination of education and industry experience showing your ability to perform the duties of this position.
•You have at least three years of experience working on cybersecurity implementation or auditing in a regulated industry (electric utility or regulatory agency preferred).
•You have a working knowledge of:
+ NERC CIP Standards;
+ NERC/WECC CMEP;
+ Generally Accepted Government Auditing Standards (GAGAS).
+ Design or maintenance of SCADA/EMS;
+ Development and implementation of cybersecurity strategies;
+ Professional presentation development and delivery;
+ CISA, CISSP, or related professional auditing or cybersecurity certifications;
+ NERC Operations and Planning (O&P) Standards.
•You are experienced in professional presentation development and delivery.
•You are a current or previous certified auditor, such as Certified Internal Auditor, Certified Government Auditing Professional, Certified Quality Auditor.
•You can effectively engage and participate in stakeholder discussions and work as a stakeholder.
•You maintain excellent organizational skills and can work on many projects at once with only occasional guidance.
•You can and are willing to travel up to 50% of your work time.
•Possess strong computer literacy and proficiency using PCs, including a working knowledge of common applications such as those in the Microsoft Office Suite.
•Understand and adhere to sound principles of cybersecurity, including protecting sensitive information, using secure passwords, and following organizational cybersecurity protocols.
Our Culture and Values
•Our people and our work matter;
•Everyone is invited to be a leader;
•Independence, perspective, and partnership are how we add value;
•Intellectual curiosity, empowerment, and accountability fuel meaningful results;
•Continuous improvement and innovation are essential; and
•We act with intention and focused urgency in everything we do.
Benefits and Compensation
The base salary range for this full-time position is $96,700–$120,900 + discretionary pay + benefits. Our salary ranges are determined by role and level. The range displayed on each job posting reflects the minimum and midpoint for the position across all locations. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Your recruiter will share more details during the hiring process.
WECC offers an excellent benefits package including medical, dental, vision, life insurance, health reimbursement and flexible spending accounts, a 401(k) plan, and generous paid personal time.
Equal Opportunity Employer
We foster an organizational culture that values the visible and invisible qualities that make individuals who they are. When individuals bring their whole selves to work, without apprehension, we, as WECC, will meet our mission now and in the future.
WECC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
*
Be a part of something that matters!
Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.