Senior Consultant - NERC CIP SME

Guidehouse•Dallas, TX

11d•$89,000 - $148,000•Onsite

About The Position

Guidehouse is seeking a highly skilled Senior Consultant with NERC CIP subject-matter expertise to design and implement secure, compliant architectures for enterprise and operational environments. The role requires deep expertise in regulatory frameworks, cybersecurity best practices, and advanced data architecture. The consultant will support compliance with North American NERC Reliability Standards and Critical Infrastructure Protection (CIP) requirements, working with regulatory frameworks and processes involving NERC and Regional Entities. The position covers enterprise data architecture, cloud and on-premises security, access controls, OT security, and regulatory audit readiness. The consultant will collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs. The role may require travel, including potential international travel, and work onsite at a Guidehouse or client office. Candidates must reside in the contiguous United States and be a U.S. citizen or permanent resident.

Requirements

Must be a U.S. citizen or U.S. permanent resident.
Bachelor’s degree from an accredited university or college.
At least three years of post-graduation work experience within the electric utility industry or a NERC-related regulator.
Work experience emphasizing North American NERC Reliability Standards (USA and/or Canada), supporting regulatory frameworks and processes around NERC Critical Infrastructure Protection (CIP) and Regional Entities.
Experience designing enterprise data models, data lakes, warehouses, and integration frameworks using structured and unstructured data.
Deep understanding of NIST, ISO 27001, and CIS controls to architect secure systems and enforce security compliance.
In-depth knowledge of implementing NERC CIP standards (002–013), audit preparation, evidence gathering, and mitigation planning.
Proficiency securing data flows across AWS, Azure, and on-premises environments with encryption, IAM, and network segmentation.
Ability to design and implement RBAC, ABAC, MFA, and privileged access management aligned with CIP-007 and CIP-005 requirements.
Ability to design secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
Familiarity with securing OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
Ability to ensure data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
Strong writing skills for creating security architecture diagrams, CIP evidence packages, procedures, and training materials.
Ability to work effectively with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.
Ability to travel, including potential international travel as needed.
Ability to work onsite at a Guidehouse office or client office location.
Currently reside in the contiguous United States.

Nice To Haves

Reasonable driving distance from a listed core Guidehouse office or client office location.
Experience related to the Bulk Electric System (BES) and power systems.
Experience related to electrical reliability.
Experience related to NERC/FERC enforcement or auditing.

Responsibilities

Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data.
Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance.
Implement NERC CIP standards (002–013), including audit preparation, evidence gathering, and mitigation planning.
Secure data flows across AWS, Azure, and on-premises environments using encryption, IAM, and network segmentation.
Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations.
Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.
Create security architecture diagrams, CIP evidence packages, procedures, and training materials.

Benefits

Medical, prescription, dental, and vision insurance.
Personal and family sick time and company-paid holidays.
May be eligible for a discretionary variable incentive bonus.
Parental leave and adoption assistance.
401(k) retirement plan.
Basic life and supplemental life insurance.
Health Savings Account and dental/vision and dependent care Flexible Spending Accounts.
Short-term and long-term disability.
Student Loan PayDown.
Tuition reimbursement, personal development, and learning opportunities.
Skills development and certifications.
Employee referral program.
Corporate-sponsored events and community outreach.
Emergency back-up childcare program.
Mobility stipend.