Physical Security Compliance Specialist - Corporate Security

FirstEnergy•Akron, OH

1d•Onsite

About The Position

Physical Security Compliance provides operational and governance support for companywide security, physical security CIP compliance, and Business Continuity Management for FirstEnergy personnel and assets. The work includes developing and governing CIP policies, procedures, and controls related to physical security, as well as coordinating governance and oversight of the Corporate Business Continuity Management program. The group also issues identification badges to employees and contractors throughout the FE footprint and administers and reports on access. The specialist develops, supports, and implements physical security compliance programs to meet company, state, and federal regulatory requirements. The role supports NERC CIP compliance, maintains related policies and evidence, coordinates audits and investigations, manages regulatory maintenance, testing, visitor-control, and training programs, and conducts assessments of compliance programs and Security Operations Center operations. The position is on-site within the FE footprint and reports to the Supervisor, Physical Security Compliance. The selected candidate may be offered a position in the same job family at a lower level, based on interview results and relevant qualifications.

Requirements

For Specialist IV: Bachelor's degree in Business Administration or a related field is preferred, with a recommended minimum of 7 years of professional work experience; demonstrated working knowledge of NERC CIP compliance is required.
Successfully complete a background investigation to obtain CIP access.
Make accurate decisions and demonstrate sound judgment.
Demonstrated ability to develop programs, training, policies, procedures, reports, and mitigation plans.
Ability to write and follow work plans.
Proficiency in Microsoft Office applications.
Exceptional teamwork and interpersonal skills to help resolve compliance issues.
Strong organizational skills for planning, developing, and performing assessments and coordinating resolution of compliance issues.
Flexibility to travel, potentially including overnight stays.
Demonstrated teamwork, communication, innovation, and independent initiative.
Excellent written and verbal communication skills for documenting findings and communicating subject matter across multiple knowledge levels.
Certification as a Physical Security Professional (PSP), Certified Protection Professional (CPP), Pro-Watch Badge Administrator, or equivalent professional certification is required.
Obtain FirstEnergy internal Compliance Champion certification within 6 months of assignment.
For Specialist IV and V: Bachelor's degree in Business Administration or a related field and a recommended minimum of 10 years of professional work experience, with demonstrated strong performance.
For Specialist IV and V: Work at a higher level of responsibility with greater self-direction and be considered a subject matter expert.

Nice To Haves

Knowledge of physical security compliance controls, regulatory matters, and business applications.
Bachelor's degree in Business Administration or a related field is preferred for Specialist IV.

Responsibilities

Develop, support, and implement the ongoing strategy for FE physical security compliance programs to meet company, state, and federal regulatory requirements.
Provide guidance to support and enhance physical security programs and ensure compliance with NERC CIP Standards.
Develop and maintain FE compliance policies, programs, procedures, and guidelines related to NERC CIP Standards.
Develop and maintain Corporate Security policies consistent with physical security best practices.
Develop and maintain Reliability Standard Audit Worksheets (RSAW), evidence documentation, and bases for compliance certifications for applicable NERC CIP Standards owned by or applicable to Physical Security.
Support state-based physical security regulatory requirements.
Prepare, coordinate, and support compliance audits conducted by internal resources, consultants, and regulatory organizations.
Represent Physical Security in audits, audit investigations, and planning teams addressing potential compliance concerns.
Conduct compliance investigations, document root cause analyses, and ensure potential violations are tracked for timely resolution and documented in auditable records.
Use FE technology to assign, track, and monitor compliance efforts.
Manage regulatory-required maintenance and testing programs.
Manage the regulatory-required visitor control program.
Manage required training, including CIP training and Physical Security Awareness Training.
Research and interpret regulatory standards and policies to align Corporate Security practices with compliance requirements.
Participate in compliance champion meetings, CIP change meetings, and internal and external planning and development meetings.
Conduct internal assessments to verify that compliance programs meet regulatory requirements.
Develop and conduct assessments of Security Operations Center operations for compliance with regulatory requirements and company policies and procedures.
Provide subject matter expert support to contract labor.
Serve as a Speak Up resource.