NERC CIP Compliance Administrator

Arizona G&T Cooperatives•Benson, AZ

About The Position

Joining Arizona G&T Cooperatives as a NERC CIP Compliance Administrator offers a unique opportunity to play a vital role in the energy sector while ensuring adherence to critical compliance standards. You will engage with cutting-edge technologies and innovative practices that drive the industry forward, allowing you to contribute significantly to the energy landscape. This position empowers you to be a problem solver, where every challenge yields the chance for professional growth and development. Collaborating with a team of forward-thinking professionals will enhance your knowledge and expertise in compliance, making every day at work an exciting opportunity for learning and advancement. Your commitment to excellence and integrity will not only reflect our values but also position you as a leader in maintaining the highest standards in the energy industry. Embrace this chance to make a meaningful impact! Purpose: The NERC CIP Compliance Administrator is responsible for supporting the Arizona Electric Power Cooperative's compliance with the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Reliability Standards. This role coordinates compliance activities, maintains documentation and evidence, supports Subject Matter Experts (SMEs), and assists in preparing for compliance audits and regulatory reviews conducted by entities such as Western Electricity Coordinating Council (WECC) and NERC. The position works cross-functionally with cybersecurity, information technology, operations, engineering, and physical security personnel to ensure compliance obligations are tracked, documented, and maintained in accordance with regulatory requirements.

Requirements

Bachelor's degree in business administration, cybersecurity, information systems, engineering, or related field preferred. Equivalent work experience in regulatory compliance may be considered.
5 or more years of experience supporting regulatory compliance programs, preferably in the electric utility industry.
Experience with NERC CIP Reliability Standards strongly preferred.
Understanding of NERC/WECC Reliability Standards and NERC/WECC's application and enforcement policies and processes.
Experience in the development of operating procedures and processes and technical writing is desired.
Excellent verbal, written, and organizational skills.
Ability to comprehend technical and legal language associated with NERC/WECC Reliability Standards.
Proficiency in Microsoft Office and document management systems.
Ability to coordinate across multiple departments and technical teams.
Any equivalent combination of education, training, and/or experience can be substituted for requirements listed above.

Responsibilities

Maintain and manage documentation supporting compliance with applicable NERC CIP Reliability Standards.
Coordinate with internal SMEs to collect, review, and maintain compliance evidence.
Track and manage recurring compliance activities such as: access reviews patch management verification vulnerability assessments security awareness training configuration monitoring incident response exercises
Maintain compliance calendars and ensure required tasks are completed within required timelines.
Maintain compliance procedures, policies, and supporting documentation related to NERC CIP Standards.
Organize and maintain evidence repositories for compliance monitoring and audit readiness.
Assist with updates to procedures, Standards alignment, and revision history tracking.
Support preparation for NERC/Regional Entity audits, spot checks, and self-certifications.
Assist in responding to data requests from regulators and internal compliance reviews.
Support development of audit responses and evidence packages.
Assist in tracking and documenting mitigation plans, action items, and corrective actions related to compliance activities.
Coordinate periodic reviews of procedures and documentation supporting compliance requirements.
Assist with tracking and documenting mitigation plans and compliance actions if issues are identified.
Support implementation of compliance program improvements and internal controls.
Coordinate compliance meetings with SMEs and stakeholders.
Develop and deliver training or guidance to personnel on applicable NERC CIP Reliability Standards, compliance responsibilities, and documentation expectations.
Support internal awareness of compliance obligations among cybersecurity, operational technology (OT) and physical security staff.
Monitor updates to NERC CIP Reliability Standards and regulatory guidance.
Assist with implementation planning and documentation updates for new or revised Standards.