Manager, CIP Compliance

This is a fully remote position, open to applicants in New York.

📋 Description

• Lead and manage the Critical Infrastructure Protection (CIP) compliance monitoring activities within NPCC’s Compliance Monitoring and Enforcement Program.

• Oversee CIP compliance monitoring engagements throughout the United States and Canada.

• Supervise, mentor, and enhance the skills of the CIP compliance monitoring team.

• Develop, sustain, and progressively refine processes that support CIP compliance audits, self-certifications, spot checks, and other monitoring tasks.

• Review and revise processes in accordance with NERC Rules of Procedure, CMEP guidance, FERC Orders, Canadian agreements, emerging risks, and ERO Enterprise initiatives.

• Aid in risk-based monitoring by assessing entity risks, internal controls, compliance history, and other risk indicators.

• Assist with the formulation of annual monitoring plans, strategies, documentation, records, metrics, and KPIs.

• Act as Audit Team Lead by orchestrating audit activities, coordinating resources, facilitating discussions, reviewing work products, and ensuring the quality of engagements.

• Develop risk-informed scopes for compliance monitoring.

• Review workpapers, engagement documentation, reports, and deliverables related to compliance monitoring.

• Ensure engagements adhere to timelines and milestones, including evidence submissions, interviews, site visits, reporting, comment periods, and final report issuance.

• Identify trends in CIP compliance, emerging risks, and industry developments; contribute to lessons learned, outreach materials, and analytical reports.

• Support recruitment, interviewing, selection, onboarding, training, succession planning, and employee development initiatives.

• Build and maintain relationships with Registered Entities, NERC, Regional Entities, and other industry stakeholders.

• Facilitate discussions concerning audit scope, evidence requests, internal controls, results, and continuous improvement.

• Develop and provide training, education, outreach, and communications.

• Represent NPCC in ERO Enterprise committees, task forces, working groups, and special projects.

• Undertake other assigned duties and special projects as necessary.

⛳️ Requirements

• Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, Cybersecurity, or a related technical field, along with ten (10) or more years of relevant industry experience; or an equivalent combination of education and experience that demonstrates the ability to perform the essential functions of the role.

• A minimum of ten (10) years of experience in the electric utility sector or a related technical domain.

• Proficient in desktop and systems design.

• Experienced in evaluating compliance programs, internal controls, risk mitigation strategies, or governance processes associated with NERC Reliability Standards.

• Ability to analyze compliance monitoring outcomes, identify trends, and formulate recommendations and reports.

• Preferred: Master’s degree in a related discipline.

• Preferred experience in managing compliance monitoring under delegated regulatory authority.

• Preferred familiarity with Canadian provincial reliability agreements, memoranda of understanding, or cross-border regulatory frameworks.

• Preferred expertise in the NP-View network analysis tool.

• Preferred background in risk-based compliance monitoring and internal controls evaluation.

• Preferred certifications include CISSP, CISA, CISM, GCIP, PMP, CIA, or other relevant professional certifications or licenses.

• Strong leadership, supervisory, coaching, mentoring, analytical, problem-solving, critical-thinking, project management, organizational, and prioritization skills.

• Advanced proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, and Teams.

• Ability to lead cross-functional and virtual teams.

• Willingness to work and travel within the U.S. and to Canada.

• Ability to work for prolonged periods on a computer.

🏝️ Benefits

• Equal Opportunity Employer.

• Remote work location.

• Travel to main office and in-person meetings as required.

• Opportunities for professional development.

• Initiatives for training, succession planning, and continuous development.