Senior CIP Compliance Analyst

This is a fully remote position, open to applicants in Alabama, +44 more states.

📋 Description

• Take charge of the daily administration of the NERC CIP compliance program and facilitate process enhancements.

• Spearhead the creation, upkeep, and implementation of policies, procedures, and controls that align with CIP requirements.

• Oversee the compliance task calendar and ensure accountability among task owners.

• Coordinate both internal and external audits, self-certifications, and spot checks.

• Set evidence standards and conduct quality reviews of compliance documentation.

• Lead risk assessments, gap analyses, remediation planning, and workflows for potential violations and self-reports.

• Conduct interviews with subject matter experts and design strategies for gathering evidence.

• Create and maintain compliance metrics and compile program reports for management and leadership.

• Identify, escalate, and resolve compliance challenges and mitigation activities.

• Provide guidance to IT, Cybersecurity, OCC IT & Operators, physical security, and other teams regarding CIP requirements.

• Manage responses to regulatory inquiries and requests.

• Investigate compliance technologies and suggest tools for monitoring, evidence management, and scalability.

• Develop and present CIP compliance and security awareness training.

• Maintain audit-ready documentation and administer CIP compliance management platforms and workflows.

• Mentor, coach, and onboard other analysts.

• Independently scope, plan, and implement compliance initiatives with minimal supervision.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, or a related field; or equivalent experience.

• At least 7+ years of experience in NERC CIP compliance, demonstrating ownership of compliance activities or initiatives.

• Extensive knowledge of NERC CIP standards and regulatory frameworks.

• Experience in leading or supporting audit and self-certification processes.

• Proven ability to work autonomously, manage initiatives from start to finish, and mentor or informally guide peers.

• Familiarity with SOX, NIST, ISO270001, or other security and compliance standards (preferred).

• Technical expertise in network infrastructure, industrial control systems (ICS), operational technology (OT), and/or security tools (preferred).

• Strong organizational abilities and meticulous attention to detail.

• Capacity to independently analyze compliance requirements, convert them into actionable plans, and assist others in their execution.

• Excellent written and verbal communication skills, with the capability to prepare clear documentation and interact effectively with internal teams, leadership, and regulators.

• Applicants must have legal authorization to work in the U.S. without requiring employer sponsorship now or in the future.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Basic life insurance

• Disability insurance

• 401(k) plan

• Vacation pay

• Sick pay

• Holiday pay