IT Compliance/Risk Management Analyst Senior

aps•Deer Valley, AZ

1d•Remote

About The Position

Arizona Public Service (APS) is hiring a senior IT Compliance/Risk Management Analyst to assess and oversee technology-related compliance across the organization. The position leads the development, implementation, and administration of IT regulatory compliance and licensing programs, and works with Infrastructure and Operations departments to identify potential compliance issues, provide training, communicate upcoming deadlines, and support projects with Critical Infrastructure Protection (CIP) requirements in mind. The role has primary responsibility for developing and/or administering regulatory programs, which may include policy creation, communication, compliance, and interpretation. It coordinates regulatory documentation and filings, advises on the effects of regulatory changes, guides corrective actions and process changes, and leads audits and spot checks. The position also represents APS in industry and governmental forums related to regulatory issues. This position requires CIP access under NERC standards. The successful applicant must obtain and maintain that access, which involves a seven-year criminal history check and an additional background check every seven years. The role is home based: employees primarily work from their home offices and attend an APS facility as needed. Employees must reside in Arizona, or in New Mexico if based at Four Corners. A home office must have adequate technology and an appropriate ergonomic setup. Role types may change based on business needs.

Requirements

Bachelor's degree in Information Technology or a related field and seven years of prior relevant experience, or an equivalent combination of education and directly related experience.
Knowledge of IT, federal and state rules and regulations, company or business-unit operations, and compliance policies, procedures, and programs in the assigned area.
At least one year of experience in a program development role working with one or more of Sarbanes-Oxley, NERC CIP, Export Control, or HIPAA.
Skill in communicating effectively with technical and non-technical audiences.
Must obtain and maintain CIP access consistent with NERC standards, including required background checks.

Nice To Haves

Strong research, analytical, interpretive, and organizational skills.
Ability to manage an overarching calendar of events with consistent results.
Experience leading large efforts across multiple business units.
Proficiency with collaboration, spreadsheet, word-processing, graphics, and other software applications used in the assigned area.
Demonstrated effective verbal and written communication and interpersonal skills.

Responsibilities

Lead IT regulatory staff in developing, implementing, and administering IT regulatory compliance and licensing programs.
Develop and/or administer one or more regulatory programs, including policy creation, communication, compliance, and interpretation.
Initiate, coordinate, analyze, draft, and review licensing applications and renewals, regulatory requirements and communications, compliance governance materials, finding and issue summaries, responses, and other CIP-related materials.
Ensure accurate and timely preparation and filing of required licenses and reports with government and regulatory agencies.
Coordinate with company departments to ensure regulatory compliance, including identifying and overseeing exception situations.
Review and guide department actions to mitigate exceptions and assess whether audit-related implementation is successful.
Evaluate and advise on the impact of regulatory decisions in the assigned area of expertise.
Direct changes to processes, procedures, administrative controls, and documentation to support compliance and program effectiveness.
Interpret and advise on new and changing rules and regulations from federal, state, and other regulatory agencies.
Consult with IT and business leaders about the short- and long-term impacts of regulatory changes.
Develop and deliver training and oversight on regulatory issues; identify training needs and opportunities and develop program objectives and design.
Lead audits and spot checks of processes, procedures, IT systems, and compliance evidence; research identified issues and implement or recommend corrective actions.
Maintain knowledge of relevant laws and regulations for the assigned area or technical specialty.
Represent APS in industry and governmental forums, committees, and working groups dealing with regulatory issues.