Regulatory Compliance Associate

EDP Renewables•Houston, TX

3h•Hybrid

About The Position

EDP Renewables is a global leader in the renewable energy sector and the fourth-largest wind energy producer. With a sound development pipeline, first-class assets, and market-leading operating capacity, EDPR has undergone exceptional development in recent years and is currently present in 28 markets. Our company is part of EDP, a global energy group present in around 30 markets with a particular emphasis on renewable energies. With more than 45 years of experience, we have been consolidating a relevant presence on the world energy scene based on the commitment to be all-green by 2030, leading the energy transition. With more than 13,000 employees around the world, we are committed to using our energy and heart to drive a better tomorrow. Role Overview: Focus on assisting in the managing of the NERC CIP compliance program as well as other regulatory compliance programs to support and align with EDPR NA's cybersecurity posture and the associated regulatory requirements. Contributes to the on-going strategy of the compliance program to meet regulatory and company requirements.

Requirements

Bachelor's degree in Computer Science or related discipline and 5-8 years of related experience or in lieu of a degree, 9-12 years of relevant work experience.
Strong knowledge of business practices and processes in a regulatory environment, specifically NERC CIP.
Experience leading projects or teams and knowledge of project management.
Strong problem solving and analysis ability.
Excellent communications skills (written and verbal). Able to present complex information both verbal and written to multiple levels of the organization.
Ability to lead remote project teams and individuals.
Strategic, forward thinking, solid planning and organizational skills

Nice To Haves

Experience with CIP specific audit skills, controls, cyber and physical security, and related industry regulatory issues- preferred.
NERC and Regional portal administration applications: Align, Evidence Reporting Tool- preferred.
Experience writing program level documentation (Policies, Processes, and Procedures)- preferred

Responsibilities

Facilitate cross-department coordination of NERC CIP Standards: (20%) o Collaboratively work on audit preparation and management of Reliability Standard Audit Worksheet (RSAW) development. o Coordinate with applicable departments to ensure compliance with NERC CIP. o Report of potential noncompliance in NERC Align system and the Secure Evidence Locker. o Drafting self-reports and mitigation plans, as needed.
Ensure the development of processes, workflows and evidence required for compliance to the CIP standards for which NERC CIP Assurance is accountable: (20%) o Collaboratively work to ensure the development of processes, workflows and evidence required to meet the CIP Security Controls developed and implemented by the NERC CIP Assurance team. o Collaboratively work with all other NERC CIP applicable business areas to develop processes, workflows and evidence necessary to achieve the NERC CIP compliance objectives. o Provides input on process improvements to NERC CIP Compliance program. o Identifies, resolves, and escalates, as needed, more complex program issues. o Identify areas for improvement and take action to resolve.
Build strong relationships with business partners and other stakeholders (NERC and Regional Entities). (20%)
Establish positive team environment by proactively assisting and training less experienced personnel. (15%)
Proactively engages in training and development programs to improve and maintain job performance and promote professional growth and development. (10%)
Support other regulatory needs of the company (15%)
Integrate and align information security and/or cybersecurity policies to ensure system analysis meets regulatory security requirements.
Lead and align information technology (IT) security priorities with the security strategy.
Interpret and apply laws, regulations, policies, standards, or procedures to specific issues.
Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy and mission assurance.
Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
Define and implement policies and procedures to ensure protection of real time critical infrastructure and meet regulatory commitments.
Assist in development, analysis, maintenance, and training of EDPR NA’s policies, procedures, standards, and other systematic preventive measures developed to ensure adherence with applicable compliance requirements and industry best practices.