Description
PRIMARY PURPOSE OF POSITIONThe Critical Infrastructure Protection (CIP) Technical analyst is responsible for developing and implementing programs to evaluate the regional entity's adherence to the NERC CIP Rules of Procedure, Compliance Monitoring and Enforcement Program, specifically as it pertains to the CIP security standards. This position reports to the manager of CIP compliance.
PRIMARY DUTIES
- Perform Linux and Unix Technical Administration tasks to support the EMS system and Operational compliance. Perform configuration management, Security Controls Testing, Account Management, Troubleshooting, change control, disaster recovery, Malicious Software prevention
- Drive innovation by Automating manual tasks and optimizing service delivery
- Participate in regional entity CIP compliance program spot audits/audits Review records and recordkeeping practices of regional entities' compliance CIP enforcement activities. Perform sufficiency review for evidence of compliance
- Prepare detailed audit reports communicating the results of CIP audits, including areas of strengths and areas for improvement. Write Technical & Reference Materials documenting internal processes
- Develop and implement oversight program to evaluate the regional entity's adherence to the NERC Rules of Procedure, Compliance Monitoring and Enforcement Program, and delegation agreements. Develop detailed material, information and tools to improve consistency in CIP auditing and compliance monitoring.
- Provide CIP support to Compliance Violation Investigations and the Corrective Action Program
- Provide technical expertise in support of all IT departments
- Assist in the ongoing development and improvement of NERC compliance monitoring and enforcement program policies, procedures, rules.
- Develop KPI for CIP Compliance monthly reporting
Minimum:
- Minimum of a Bachelor's Degree from an accredited four-year college or university.
- Linux OS Administration
- Ability to manage and solve complex problems.
- Ability to work independently
- Ability to lead
- Ability to collaborate and influence groups outside of your organization
- Ability to write technically
- Strong communication skills (written and verbal)
- An advanced degree and/or studies in information technology, engineering, auditing or risk management preferred.
- Audit or enforcement experience.
- Proficiency in NERC CIP Reliability Standards.
- Strong understanding of the bulk power system.