Senior RCR Analyst

This is a fully remote position, open to applicants in New York.

📋 Description

• Evaluate operational characteristics and attributes of entities to identify risks related to the reliability and security of the Bulk Power System.

• Create and revise Entity Inherent Risk Assessments (IRA) and Compliance Oversight Plans (COP).

• Formulate audit scoping recommendations in line with NPCC Compliance Instructions and ERO report format guidelines.

• Provide guidance on the focus areas for internal controls assessments based on inherent and residual risks of the entity.

• Analyze the maturity of the entity's risk and controls program.

• Review the design, implementation, and efficacy of the entity's internal control activities.

• Assess monitoring engagement outcomes and compliance history to formulate and update entity COPs.

• Adhere to IRA and COP processes as per specific Canadian Provincial agreements.

• Assist with registration processes, usage of the ERO CORES tool, and completion of registration surveys, questionnaires, and data requests.

• Contribute as a team member during certification activities.

• Aid in the development of training, educational materials, communication, and outreach for NPCC staff and industry stakeholders.

• Provide support to NPCC Compliance Monitoring and NPCC Enforcement departments as required.

• Represent NPCC on ERO entity risk, mitigation, controls, compliance monitoring, and registration task forces, working groups, special projects, and sub-teams.

⛳️ Requirements

• Bachelor's Degree in Engineering, Cyber Security, Information Systems, or Risk Management; or a suitable combination of education and relevant experience in the electric utility industry.

• A minimum of three (3) years of experience for Analyst positions, or at least five (5) years for Senior Analyst roles, in areas such as electric maintenance, engineering, system operations, cybersecurity, information security, OT security, risk management, internal audit, compliance, internal controls, regulatory compliance, enterprise risk management, or operational risk assessment.

• Familiarity and knowledge of NERC O&P and CIP Reliability Standards along with associated internal controls.

• Understanding of NERC/NPCC Compliance Monitoring and Enforcement Programs.

• Capability to analyze data, identify risks and control weaknesses, and effectively communicate findings to stakeholders.

• Willingness to work and travel within the U.S. and travel to Canada.

• Strong verbal and written communication, interpersonal, conflict resolution, organizational, analytical, and problem-solving abilities.

• Competence to work independently and collaborate in a cross-functional team setting.

• Ability to sit for extended periods and manage prolonged screen time.

• Preferred: experience in conducting risk assessments, control evaluations, or compliance reviews.

• Preferred: knowledge of COSO, ISO 31000, NIST, NERC Reliability Standards, and NERC/NPCC programs.

• Preferred professional certifications include CIA, CRMA, CISA, GICSP, or CISSP.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with employer contributions.

• Professional development opportunities and training programs.

• Flexible work arrangements and paid time off.