Senior RCR Analyst

This is a fully remote position, open to applicants in New York.

📋 Description

• Evaluate operational attributes and characteristics of the entity to identify risks related to the reliability and security of the Bulk Power System.

• Create and revise Entity Inherent Risk Assessments (IRA) and Compliance Oversight Plans (COP).

• Formulate audit scoping recommendations that align with NPCC Compliance Instructions and the ERO report format guidelines.

• Provide guidance on focus areas for internal controls assessment based on both inherent and residual entity risks.

• Evaluate the maturity of the entity’s risk and controls programs.

• Assess the design, implementation, and effectiveness of internal control activities within the entity.

• Utilize monitoring engagement outcomes and compliance history to refine and update entity COPs.

• Adhere to IRA and COP processes as outlined in specific Canadian Provincial agreements.

• Support registration processes, utilize the ERO CORES tool, and manage registration surveys, questionnaires, and data requests.

• Act as a team member during certification activities.

• Create training, education, communication, and outreach materials for NPCC staff and industry stakeholders.

• Assist the NPCC Compliance Monitoring and NPCC Enforcement departments.

• Represent NPCC in ERO entity risk, mitigation, controls, compliance monitoring, and registration task forces, working groups, special projects, and sub-teams.

⛳️ Requirements

• Bachelor's Degree in Engineering, Cyber Security, Information Systems, or Risk Management; or an equivalent combination of education and relevant electric utility industry experience.

• A minimum of three years of experience for an Analyst role or at least five years for a Senior Analyst position in areas such as electric maintenance, engineering, or system operations; cybersecurity, information security, or operational technology security; risk management, internal audit, or compliance; development, implementation, or assessment of internal controls; regulatory compliance within a utility, energy, or critical infrastructure environment; or enterprise risk management or operational risk assessment.

• Familiarity with NERC O&P and CIP Reliability Standards and related internal controls.

• Knowledge of NERC/NPCC Compliance Monitoring and Enforcement Programs.

• Capability to analyze information, identify risks and control deficiencies, and communicate findings effectively to stakeholders.

• Preferred experience in conducting risk assessments, control evaluations, or compliance reviews.

• Preferred knowledge of COSO Internal Control and Enterprise Risk Management frameworks, ISO 31000, and/or NIST frameworks.

• Preferred understanding of NERC Reliability Standards, including O&P and CIP requirements.

• Preferred familiarity with NERC and NPCC Compliance Monitoring and Enforcement Programs.

• Preferred professional certifications such as CIA, CRMA, CISA, GICSP, or CISSP.

• Ability to develop and deliver professional presentations.

• Proficient in engaging and participating in stakeholder discussions.

• Capability to manage multiple projects simultaneously while receiving periodic guidance.

• Strong verbal and written communication skills.

• Excellent interpersonal and conflict resolution abilities.

• Exceptional organizational skills and attention to detail.

• Strong analytical and problem-solving skills.

• Ability to work independently and contribute effectively in a cross-functional team environment.

• Capability to sit for extended periods, communicate verbally and in writing, and manage prolonged screen time.

🏝️ Benefits

• Opportunity to work remotely.

• Travel within the U.S. and to Canada.

• Equal Opportunity Employer.