Physical Security Compliance Specialist - Corporate Security

FirstEnergy•Akron, OH

13h•Onsite

About The Position

Physical Security Compliance provides operational and governance support for corporatewide security, physical security CIP compliance, and Business Continuity Management for FirstEnergy personnel and assets. This includes governance and development of CIP policies, procedures, and controls related to physical security, as well as oversight coordination of the Corporate Business Continuity Management program. The group also issues identification badges to employees and contractors throughout the FE footprint and administers and reports on access. The Physical Security Compliance Specialist develops, supports, and implements physical security compliance programs to meet company, state, and federal regulatory requirements. The role supports compliance with NERC CIP Standards and other applicable regulations, maintains policies and audit documentation, coordinates and participates in audits and assessments, investigates potential compliance concerns, and manages regulatory maintenance, testing, visitor control, and training programs. The position is on-site within the FE footprint and reports to the Supervisor, Physical Security Compliance. The selected candidate may be offered a position within the same job family at a lower level based on interview results and the candidate’s qualifications.

Requirements

Demonstrated working knowledge of compliance related to NERC CIP Standards.
Ability to successfully complete a background investigation to obtain CIP access.
Ability to make accurate decisions and demonstrate sound judgment.
Proven ability to develop programs, training, policies, procedures, reports, and mitigation plans.
Ability to write and follow work plans.
Proficiency in Microsoft Office applications.
Exceptional teamwork and interpersonal skills to aid in resolving compliance issues.
Strong organizational skills for planning, developing, and performing assessments and coordinating resolution of compliance issues.
Flexibility to travel, which could include overnight stays.
Teamwork, communication, innovation, and independent initiative on assigned tasks.
Excellent written and verbal communication skills to effectively document findings and communicate them across multiple knowledge levels.
Professional-level writing ability to ensure consistent understanding of subject matter.
Certification as a Physical Security Professional (PSP), Certified Protection Professional (CPP), Pro-Watch Badge Administrator, or equivalent professional certification.
FirstEnergy internal Compliance Champion certification required within 6 months of assignment.
For Specialist IV: Bachelor's degree in Business Administration or a related field preferred, with a recommended minimum of 7 years of professional work experience.
For the higher-level qualifications listed: Bachelor's degree in Business Administration or a related field and a recommended minimum of 10 years of professional work experience, demonstrated strong performance, ability to work at a higher level of responsibility with greater self-direction, and status as a subject matter expert.

Nice To Haves

Knowledge of physical security compliance controls, regulatory matters, and business applications.
Bachelor's degree in Business Administration or a related field is preferred for Specialist IV.

Responsibilities

Develop, support, and implement the ongoing strategy of FE physical security compliance programs to meet company, state, and federal regulatory requirements.
Provide guidance to support and enhance physical security programs and ensure effective compliance with NERC CIP Standards.
Develop and maintain FE compliance policies, programs, procedures, and guidelines related to NERC CIP Standards.
Develop and maintain Corporate Security policies consistent with physical security best practices.
Develop and maintain Reliability Standard Audit Worksheets (RSAW), evidence documentation, and basis-of-compliance certifications for applicable NERC CIP Standards owned by or applicable to Physical Security.
Support state-based physical security regulatory requirements.
Prepare, coordinate, and support compliance audits conducted by internal resources, consultants, or regulatory organizations and agencies.
Represent physical security in audits, audit investigations, and planning teams addressing potential compliance concerns.
Conduct compliance investigations, document root cause analyses for potential violations, and ensure issues are tracked for timely resolution and documented in auditable records.
Use FE technology to assign, track, and monitor compliance efforts.
Manage regulatory-required maintenance and testing programs.
Manage regulatory-required visitor control programs.
Manage required training, including CIP training and Physical Security Awareness Training.
Research and interpret regulatory standards and policies to align Corporate Security practices with compliance requirements.
Participate in compliance champion meetings, CIP change meetings, and internal and external planning and development meetings.
Conduct internal assessments to verify that compliance programs meet regulatory requirements.
Develop and conduct assessments of Security Operations Center (SOC) operations to confirm compliance with regulations, company policies, and procedures.
Provide subject matter expert support to contract labor.
Serve as a Speak Up resource.