Description
Summary:- Works under direct supervision and follows standard procedures to accomplish assigned tasks.
- The Critical Infrastructure Protection (CIP) Technical analyst is responsible for developing and implementing programs to evaluate the regional entity's adherence to the NERC CIP Rules of Procedure, Compliance Monitoring and Enforcement Program, specifically as it pertains to the CIP security standards.
- This position reports to the manager of CIP compliance.
- Installs new software releases, system upgrades, evaluates and installs patches and resolves software related problems.
- Performs system backups and recovery.
- Maintains data files and monitors system configuration to ensure data integrity.
- Perform Linux and Unix Technical Administration tasks to support the EMS system and Operational compliance.
- Perform configuration management, Security Controls Testing, Account Management, Troubleshooting, change control, disaster recovery, Malicious Software prevention
- Drive innovation by Automating manual tasks and optimizing service delivery
- Participate in regional entity CIP compliance program spot audits/audits
- Review records and record keeping practices of regional entities' compliance CIP enforcement activities. Perform sufficiency review for evidence of compliance
- Prepare detailed audit reports communicating the results of CIP audits, including areas of strengths and areas for improvement. Write Technical & Reference Materials (T&RM) documenting internal processes
- Develop and implement oversight program to evaluate the regional entity's adherence to the NERC Rules of Procedure, Compliance Monitoring and Enforcement Program, and delegation agreements.
- Develop detailed material, information and tools to improve consistency in CIP auditing and compliance monitoring.
- Provide CIP support to Compliance Violation Investigations and the Corrective Action Program
- Provide technical expertise in support of all IT departments.
- Assist in the ongoing development and improvement of NERC compliance monitoring and enforcement program policies, procedures, rules.
- Develop KPI for CIP Compliance monthly report
Qualifications:
- Minimum of a Bachelor's Degree from an accredited four year college or university.
- Linux OS Administration
- An advanced degree and/or studies in information technology, engineering, auditing or risk management preferred.
- Ability to manage and solve complex problems
- Audit or enforcement experience.
- Ability to work independently
- Ability to lead
- Ability to collaborate and influence groups outside of your organization
- Ability to write technically
- Proficiency in NERC CIP Reliability Standards.
- Strong communication skills (written and verbal
- Strong understanding of the bulk power system.
- Layer 1-Layer 4 networking
- Security frame work
- Audit or Enforcement experience working in a regulated environment.