IT Information Security Compliance Administrator

Eagle Creek Renewable Energy • Badin, NC

6d • Hybrid

About The Position

Eagle Creek Renewable Energy is seeking an experienced IT Networking & Information Security Compliance Administrator to safeguard the company’s regulatory standing and the security of critical generation assets across its hydropower fleet. This hybrid role also provides hands-on network administration and IT helpdesk support. The role requires practical experience supporting enterprise and operational technology (OT) networks and the ability to translate complex regulatory requirements, especially NERC CIP and NIST, into clear, well-documented controls.

The administrator tracks regulatory changes, supports compliance and audit readiness, monitors and investigates security incidents, and reports compliance status and KPIs to leadership. The position also administers and secures LAN/WAN infrastructure and provides Tier 1/Tier 2 support for IT issues. The role collaborates with IT, operational technology, physical security, legal, and management teams.

Requirements

• Bachelor’s degree in information security, information systems, computer science, engineering, or a related field, or equivalent experience.
• Proven experience in regulatory compliance, audit, GRC, or internal controls; ideally in electric utility, energy, or another regulated or critical-infrastructure environment.
• Working knowledge of the NERC CIP compliance lifecycle, including self-certification, self-reporting, mitigation, and audit.
• Hands-on experience in network administration and/or IT support, ideally in a multi-site or critical-infrastructure environment.
• Strong practical skills with network hardware/software such as Cisco, Palo Alto, Fortinet, or similar, and with TCP/IP, VLANs, routing, switching, firewalls, VPNs, and wireless.
• Strong written communication and documentation discipline to produce audit-ready evidence and clear compliance reporting.
• Ability to collaborate cross-functionally with IT, operational technology, physical security, legal, and management.

Nice To Haves

• Regulatory compliance or audit experience, particularly in electric utility, energy, or another regulated or critical-infrastructure environment.
• Working knowledge of the NERC CIP compliance lifecycle.
• CompTIA Network+ or Security+, Cisco CCNA or CCNP, and/or NIST/NERC CIP-related training.

Responsibilities

• Track new and revised NERC standards and FERC orders, perform gap analyses, and translate changes into actionable requirements.
• Monitor networks and systems for security breaches or suspicious activity, investigate incidents, and produce detailed reports.
• Develop, maintain, and test internal controls and policies, and keep documentation audit-ready.
• Produce compliance status reporting and KPIs for leadership and support incident and recovery documentation.
• Administer and troubleshoot LAN/WAN infrastructure, including switches, routers, firewalls, wireless access points, and VPN concentrators.
• Implement network security controls, including ACLs, segmentation, and IDS/IPS, and support vulnerability scanning and remediation.
• Review proposed system and infrastructure changes for security, compliance, and architectural impact.
• Provide Tier 1/Tier 2 support for hardware, software, network connectivity, VPN, and remote access issues.
• Maintain accurate ticket documentation and contribute to knowledge base articles.

What This Job Offers

• Job Type: Full-time