SOX)

Dominion Energy•Cayce, SC

2d•Onsite

About The Position

In support of the SOX and TSA programs, this role maintains the cyber regulatory compliance program for business units' processes, applications, and systems. Using cyber security best practices and a deep knowledge of cyber regulatory requirements, this role provides guidance on how to achieve compliance, governs and monitors the entire program; can offer technical guidance or assess technical procedures for compliance; reduces or eliminates audit findings; implements changes and ensures adherence to all regulatory requirements. This role can lead and participate in compliance-related projects that require advanced knowledge of regulatory requirements as well as knowledge of suitable security architecture, technology best practices and business area requirements, limitations, and unique system implementations. It monitors the implementation of compliance processes and procedures for systems and applications, examines processes for failure points and implements controls to prevent those potential failures. The role coordinates or completes compliance related data requests, investigates failures or breakdowns in processes and develops plans to fix or prevent future incidents. It proactively finds opportunities to strengthen compliance controls and provides awareness of current and upcoming policies, regulations, and requirements, and collaborates with business and technical teams to develop an approach to achieve compliance. Other duties as requested or assigned.

Requirements

Cyber Compliance Specialist: 3 to 4 years of cyber or IT audit, compliance, or technology experience (Note: A Master's degree will count as one year of experience)
Senior Cyber Compliance Specialist: 5 to 7 years of cyber or IT audit, compliance, or technology experience (Note: A Master's degree will count as one year of experience)
Experience with TSA, SOX or other regulatory compliance is desired
Experience and understanding of Cyber regulatory standards and requirements
Previous experience creating and updating cyber & human performance controls for compliance requirements
Experience working with internal and external auditing firms
Experience in writing procedures and policies
Experienced translating procedures into operational steps
Root cause analysis understanding and/or training
Human performance failure analysis training and/or understanding
Understands IT Technology and Business Technology as required to successfully design and implement a compliance program
Understands current security architecture best practices
Understands current cyber security best practices
Possesses the drive to independently learn and become an expert in the evolving regulatory landscape and how that maps to an evolving Dominion Energy IT and business technology landscape.

Nice To Haves

Bachelor Degree in Cyber Security, Computer Science; Information Systems; Information Systems Security; Information Technology or equivalent combination of education and demonstrated related experience.

Responsibilities

Provides guidance on how to achieve compliance, governs and monitors the entire program; can offer technical guidance or assess technical procedures for compliance; reduces or eliminates audit findings; implements changes and ensures adherence to all regulatory requirements.
Can lead and participate in compliance-related projects that require advanced knowledge of regulatory requirements as well as knowledge of suitable security architecture, technology best practices and business area requirements, limitations, and unique system implementations.
Monitors the implementation of compliance processes and procedures for systems and applications.
Examines processes for failure points and implements controls to prevent those potential failures.
Coordinates or completes compliance related data requests, investigates failures or breakdowns in processes and develops plans to fix or prevent future incidents.
Proactively finds opportunities to strengthen compliance controls.
Provides awareness of current and upcoming policies, regulations, and requirements, and collaborates with business and technical teams to develop an approach to achieve compliance.
Perform other duties as requested or assigned.