Reliability Assurance Analyst, Senior (CIP)

Provides subject matter expertise and independent oversight for a cybersecurity and reliability compliance program aligned to the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Reliability Standards. Leads risk-informed compliance activities, maintains and enhances internal controls, supports audit readiness, and partners with IT, Operations, Security, and Engineering to implement sustainable processes. **JOB SUMMARY** Provides subject matter expertise and independent oversight for a cybersecurity and reliability compliance program aligned to the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Reliability Standards. Leads risk-informed compliance activities, maintains and enhances internal controls, supports audit readiness, and partners with IT, Operations, Security, and Engineering to implement sustainable processes. *Candidates with relevant experience in cybersecurity, GRC, IT audit, network/ IT security operations are encouraged to apply; prior NERC CIP experience is not required on day one and will be supported through onboarding, training, and mentorship.* **ESSENTIAL DUTIES & RESPONSIBILITIES** - Learns, interprets, and applies NERC CIP Reliability Standards (with training and support) and translates requirements into clear, actionable guidance for technical and operational teams. - Partners with IT, Cybersecurity, Operations, Engineering, and Physical Security to design, document, and sustain internal controls that meet regulatory and audit expectations. - Leads and performs compliance and control documentation reviews, including evidence validation, gap assessments, and evaluations of control effectiveness. - Maintains and improves compliance processes (e.g., procedures, checklists, workflows, and templates) to drive consistency, traceability, and audit readiness. - Plans and executes spot checks, self-certifications, and pre-audit activities; identifies risks, tracks mitigation actions, and validates corrective actions through closure. - Supports and/or leads responses to compliance monitoring activities (e.g., audits, spot checks, data requests), including coordinating responses, reviewing narratives, and assembling complete evidence packages. - Monitors regulatory developments (FERC, NERC, and Regional Entities), assesses applicability, and communicates potential impacts, risks, and required actions to stakeholders. - Develops and delivers training, job aids, and communications that improve awareness of compliance obligations and stakeholder responsibilities. - Maintains and enhances compliance repositories (e.g., SharePoint). - Mentors and provides guidance to junior analysts to support team development and consistent application of compliance practices. - Contributes to continuous improvement initiatives by identifying process gaps, recommending solutions, and helping implement measurable enhancements. - Performs other duties as assigned in support of the reliability compliance program. **REQUIREMENTS** - Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, Information Assurance, or a related field, or an equivalent combination of education and relevant experience. - Minimum of five (5) years’ experience in an IT related function. - Strong foundational knowledge of cybersecurity concepts (e.g., networking, firewalls, IDS/IPS, VMs, identity and access management, patch and change management) and the ability to learn and apply regulatory requirements (including NERC CIP) with training and support. - Experience creating, maintaining, or validating policies/procedures, control documentation, and audit-ready evidence (e.g., for security, IT controls, or compliance programs). - Demonstrated ability to work independently, manage complex compliance activities, and meet deadlines with minimal supervision. - Strong analytical, organizational, and problem-solving skills with excep…