Senior NERC CIP Compliance Analyst

What you'll do

• Build and maintain compliance processes, asset inventories, baselines, access controls, and evidence for NERC CIP requirements.
• Lead audit preparation and responses, routine compliance activities, self-assessments, and remediation coordination.
• Oversee patch management, incident response and recovery plan testing, vulnerability assessments, training, and supply chain risk activities.

What they ask for

• Bachelor’s degree in a related technical discipline, or equivalent direct experience.
• Minimum 5–10 years of experience in regulatory compliance, power utility operations, or industrial cybersecurity, including at least 5 years implementing and managing NERC CIP across Medium or High-impact assets.
• Demonstrated experience drafting RSAWs, preparing ERT responses, and managing audit or spot-check RFIs.
• Pass the mandatory NERC CIP-004 Personnel Risk Assessment and background check; be legally authorized to work in the U.S. without current or future employer-sponsored work authorization.

Nice to have

• Power generation plant, transmission control center, or EMS/GMS experience; NCCP designation.
• CISSP, CISA, CISM, SANS GIAC GCIP or GICSP; direct audit experience with the relevant Regional Entity.

Pay

USD 130,000–160,000 per-year base salary

Tools

NERC CIP, RSAW, ERT, CIP-007/010, CIP-005/006, CIP-013, CIP-008, CIP-009