IT Compliance/Risk Management Analyst Senior

APS•Phoenix, AZ

1d•Remote

About The Position

Arizona Public Service (APS) is hiring a senior IT Compliance/Risk Management Analyst to assess and oversee technology-related compliance across the organization. The role ensures the development, implementation, and administration of IT regulatory compliance and licensing programs. It collaborates with Infrastructure & Operations departments to identify potential non-compliance, lead training, communicate upcoming deadlines, and support projects with Critical Infrastructure Protection (CIP) compliance considerations. The analyst leads IT regulatory staff and has primary responsibility for developing or administering one or more regulatory programs. The position coordinates regulatory documentation and filings, advises on regulatory changes, oversees compliance audits and corrective actions, and represents the Company in industry and governmental forums. The role works across diverse stakeholders on large projects and multiple solutions, with outside support required for large decisions within its direct area of responsibility. This home-based position requires employees to reside in Arizona, or in New Mexico if based at Four Corners. Home-based employees work primarily from their home offices and attend an APS facility as needed. An adequate technology setup and appropriate ergonomics are required. The position requires CIP access under NERC standards, including a seven-year criminal history background check before access and an additional background check every seven years to maintain access. Applicants must confirm whether they are a U.S. person; some positions may require U.S.-person status under export control laws.

Requirements

Bachelor's degree in Information Technology or a related field, plus seven years of prior relevant experience, or an equivalent combination of education and directly related experience.
Knowledge of IT, federal and state rules and regulations, company or business-unit operations, and compliance policies, procedures, and programs in the assigned area.
At least one year of experience in a program development role involving one or more of Sarbanes-Oxley, NERC CIP, Export Control, or HIPAA.
Skill in communicating effectively with technical and non-technical audiences.
Obtain and maintain CIP access consistent with NERC standards, including the required background checks.
Reside in Arizona, or in New Mexico for Four Corners-based employees.
Confirm U.S. person or non-U.S. person status for export-control compliance.

Nice To Haves

Strong research, analytical, interpretive, and organizational skills.
Ability to manage an overarching calendar of events with consistent results.
Experience leading large efforts across multiple business units.
Proficiency with collaboration, spreadsheet, word-processing, graphics, and other software applications used in the assigned area.
Demonstrated effective verbal and written communication and interpersonal skills.

Responsibilities

Lead IT regulatory staff in developing, implementing, and administering IT regulatory compliance and licensing programs.
Develop and/or administer one or more regulatory programs, including policy creation, communication, compliance, and interpretation.
Initiate, coordinate, analyze, draft, and review licensing applications and renewals, regulatory requirements and communications, compliance governance materials, finding and issue summaries, responses, and other CIP compliance documentation.
Ensure accurate and timely preparation and filing of required licenses and reports with government and regulatory agencies.
Coordinate with Company departments to ensure regulatory compliance, including identifying and overseeing exception situations.
Review department actions to mitigate exceptions and provide guidance on evaluating implementation success.
Evaluate regulatory decisions and provide guidance on their impact within the assigned area of expertise.
Direct changes to processes, procedures, administrative controls, and documentation to ensure compliance and improve program effectiveness.
Interpret and advise on new and changing rules and regulations from federal, state, and other regulatory agencies.
Consult with IT and business leaders about the short- and long-term impact of regulatory changes.
Develop and deliver training and oversight on regulatory issues; identify training needs and opportunities and develop program objectives and design.
Lead audits and spot checks of existing processes, procedures, IT systems, and related compliance evidence.
Research issues identified through audits and implement or recommend corrective action.
Maintain current knowledge of relevant laws and regulations for the assigned area or technical specialty.
Represent the Company in industry and governmental forums, committees, and working groups dealing with regulatory issues.