Senior CIP Compliance Analyst

SOLV Energy•Remote - CA, NV

3d•$105,280 - $135,845

About The Position

The Senior CIP Compliance Analyst will help lead the ongoing implementation, maturation, and maintenance of SOLV Energy’s NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) compliance program. Operating with a high degree of autonomy under the strategic direction of the Senior Program Manager, CIP Compliance, this role will own compliance monitoring, internal reviews, documentation quality, and audit and regulatory reporting activities. The Senior Analyst serves as a subject matter expert and mentor to fellow analysts, independently scoping and driving initiatives that strengthen adherence to all applicable CIP standards and the organization’s overall cybersecurity compliance posture.

Requirements

Bachelor’s degree in Information Technology, Information Security, Cybersecurity, or related field; or equivalent experience.
Minimum 7+ years of experience working with NERC CIP compliance, including demonstrated ownership of compliance activities or initiatives (required).
Deep working knowledge of NERC CIP standards and regulatory frameworks, with experience leading or supporting audit and self-certification activities.
Demonstrated ability to work independently, own initiatives end to end, and mentor or informally lead peers (required).
Strong organizational skills and attention to detail.
Ability to independently analyze compliance requirements, translate them into actionable plans, and guide others in executing them.
Strong written and verbal communication skills, with the ability to prepare clear documentation and interact effectively with internal teams, leadership, and regulators.

Nice To Haves

Familiarity with SOX, NIST, ISO270001, or other security and compliance standards (preferred).
Technical knowledge of network infrastructure, industrial control systems (ICS), operational technology (OT), and/or security tools (preferred).

Responsibilities

Own the day-to-day administration of the NERC CIP compliance program, proactively identifying and driving process improvements.
Lead the development, maintenance, and execution of policies, procedures, and controls aligned with CIP requirements.
Manage the compliance task calendar, ensuring timely completion of deliverables across contributing teams and holding task owners accountable.
Coordinate the preparation and execution activities associated with internal and external audits, self-certifications, and spot checks.
Establish and maintain evidence standards that demonstrate compliance with CIP standards, performing quality reviews of evidence prepared by fellow analysts.
Lead risk assessments, gap analyses, and remediation planning across stakeholder teams, and drive remediation efforts through to closure.
Coordinate and execute potential violation and self-report workflows, including root cause analysis, impact scoping, mitigation documentation, and provide recommendations to the Senior Program Manager for Regional Entity submission.
Conduct structured SME interviews to elicit evidence, assess control effectiveness, and support audit and self-certification readiness.
Design and execute evidence-gathering strategies ensuring completeness and alignment with CIP evidentiary standards prior to regulatory submission or audit.
Design and maintain compliance metrics; prepare and present program reporting for management and leadership review.
Independently identify, escalate, and drive resolution of compliance issues and associated mitigation activities.
Own regular updates to leadership on program performance and emerging risks, including impact analysis of new and revised CIP standards.
Serve as a trusted advisor to IT, Cybersecurity, OCC IT & Operators, physical security, and other teams, translating CIP requirements into practical, actionable guidance.
Lead the coordination of responses to regulatory inquiries and requests.
Champion compliance-related processes and tools, driving adoption and continuous improvement across stakeholder teams.
Research emerging compliance program technologies and deliver recommendations to leadership for tools that improve monitoring, evidence management, and program scalability.
Develop and deliver CIP compliance and security awareness training programs.
Ensure employees and contractors understand NERC CIP obligations and responsibilities, tailoring guidance to role-specific risk.
Set the standard for records of compliance activities and evidence, ensuring adherence to retention requirements.
Ensure documentation is accurate, consistent, and audit-ready, performing quality reviews of documentation produced across the team.
Serve as the functional administrator for CIP compliance management platforms and workflows, including configuration support, process improvements, reporting enhancements, and user adoption activities.
Mentor and coach fellow analysts, providing technical guidance, peer review, and support for professional growth.
Onboard new team members to CIP program processes, tools, and expectations.
Model self-directed ownership by independently scoping, planning, and executing compliance initiatives with minimal oversight, keeping leadership informed of progress and risk.