Critical Infrastructure Compliance Specialist, Senior

Pedernales Electric Cooperative•Cedar Park, TX

2d•Hybrid

About The Position

This position is responsible for supporting the Compliance and Regulatory Department by developing and executing processes and leading efforts designed to maintain PEC’s compliance with applicable laws, regulations, and standards.

Requirements

Bachelor’s Degree in a related field
Directly related experience may substitute for education
Five years of directly related experience including but not limited to NERC, CIP, cyber security compliance, IT systems administration or network administration background experience
Compliance related professional certification
Valid Driver’s License
Knowledge of using computer systems, which may include setting up and using hardware and software programs, entering data, configuration, or processing information
Knowledge of principles and processes for providing customer service
Knowledge of NERC CIP regulatory requirements and compliance best practices
Skilled in time management
Skilled in prioritizing and managing changing priorities
Skilled in analytical thinking
Ability to communicate effectively verbally and in writing
Ability to maintain confidentiality
Ability to listen and understand information verbally and in writing
Ability to anticipate, identify, analyze and resolve conflict and problems

Responsibilities

Develop and lead efforts on assigned NERC CIP Standard projects, including schedule management, audit readiness, mock audit schedules, issue analyzing, internal/external project coordination, research/report production, and document management.
Direct the inspection and review data and information for accuracy to maintain compliance with North American Electric Reliability Corporation’s (NERC) Critical Infrastructure Protection (CIP) Standards for its Operational Technology (OT) and Informational Technology (IT) environments utilized to operate PEC’s transmission and distribution systems.
Evaluate and provide oversight of reporting from PEC’s automated systems and PEC’s IT and Supervisory Control and Data Acquisition (SCADA) groups to ensure the effective compliance of NERC CIP Reliability Standards.
Verify and ensure operating system updates, patches, and configuration changes were performed in accordance with NERC Reliability Standards.
Provide oversight of the baseline process and that credible and sufficient documentation is completed and updated to ensure continual compliance in accordance with NERC Reliability Standards.
Verify system diagrams and documentation for installation of new and modified hardware, software, and networks.
Provide oversight verification of system configuration for proper logging.
Provide oversight verification of system backup and recovery policies and procedures including routine automated and manual backups and offsite storage for compliance.
Validate that backup and recovery procedures are per industry standards and/or regulatory compliance.
Lead the participation in performance audits on overall system architecture and system integration between various energy management system (EMS) applications and interfaces with other PEC systems.
Oversee the verification of account administration, system hardening and vulnerability scans.
Lead compliance efforts in the development of procedures for specifying and maintaining servers, storage, and special purpose workstations.
Provide CIP compliance input in the development of requirements and verify the reliability and compliance reports related to the construction, operation, and maintenance of PEC’s Facilities and systems using a personal computer and Microsoft Office software.
Synthesize and analyze technical information and data needed to prepare reports.
Direct and develop reports and fill information and data requests.
Serve as Lead Subject Matter Experts in researching and preparing work plans, goals, procedures, and proposed solutions to complex reliability and compliance related issues.
Author and recommend revisions to reliability and compliance related policies and procedures as a result of data gathered and feedback from staff performing NERC/Texas Reliability Entity (Texas RE) reliability and compliance related activities.
Lead the development of Self Reports, Mitigation Plans, and other external and internal reliability and compliance related documents.
Lead internal cross functional teams to gather and verify reliability and compliance related data from a team of IT/OT System Administrators, Operations, and others.
Maintain current technical knowledge of NERC/Texas RE Requirements in order to update policies and procedures.
Implement required policies, procedures, and configurations; make recommendations for improvements.
Prepare and present reliability and compliance related materials to a wide variety of audiences including senior management.
Represent PEC in industry stakeholder groups including CIPWG at ERCOT.
Provide senior-level review and verification other types of information related to 693 Operations and Planning Standards.
Strategized, prepare for and lead the organization during Texas RE Audits.
Maintain the security of confidential information
Stay abreast of advances in technology
Demonstrate regular and prompt attendance
Performs other related duties as necessary or assigned