Staff, Compliance Coordinator

Southern Company • Birmingham, AL

3d • Hybrid

About The Position

The position exists to provide staff support to the NERC Internal Controls Manager responsible for developing and executing an effective internal control program to prevent and detect non-compliance with NERC Reliability Standards and Southern Company policies. The position also exists to ensure that Southern Company Operations Compliance Programs are consistent and coordinated with Southern Company and subsidiary Compliance Programs.

Requirements

• Bachelor's degree required in Business, Information Systems or Engineering.
• 3 years Operations experience in Generation, Power Delivery, or similar preferred.
• 3 years supporting compliance-related activities specific to NERC Reliability Standards (including Cyber Security and Information Technology experience applying cyber security standards) preferred.
• Experience leading team or organizational efforts to comply with regulatory requirements.
• Experience developing and maintaining compliance-related documentation including policies, procedures, risk assessments, and audit evidence.
• Experience developing technical documentation including procedures, flow-charts, specifications, cost estimates, business cases, requests for information, etc.
• Experience successfully working across matrix organizations.
• Experience facilitating communications about compliance-related topics.
• Experience identifying opportunities for process efficiencies and implementing process improvements.
• Experience in developing or testing internal controls designed to ensure work practices are successfully completed.
• Strong oral and written communication, evaluation, and analytical skills are required to be successful in this role.
• Thorough understanding of energy regulation laws and standards and of the principles of an effective internal controls program specific to energy regulation.
• Ability to interpret control frameworks and regulations, identify and prioritize risks, and assist in the design and execution of management programs and internal controls to effectively manage compliance risks.
• Ability to design and execute internal control monitoring programs on behalf of management.
• Ability to design and deliver internal control-related training programs on behalf of management.
• Strong interpersonal, facilitation, negotiation, and presentation skills to effectively communicate, consult, and build working relationships with employees, senior management, industry peers, regulatory contacts and contractors.
• Ability to manage multiple projects and demonstrate effective project management skills including planning, organizing, and directing.
• Computer skills, including proficiency with MS Word, MS PowerPoint (presentations), MS Outlook and Teams for Business as well as the ability to quickly learn vendor compliance software applications (e.g. WDesk, etc.)
• Able to partner with stakeholders in business units to find win-win solutions.
• Commitment to Our Values: Safety First, Intentional Inclusion, Act with Integrity and Superior Performance.
• Continual learner, highly self-motivated, team player, flexible/adaptable, committed to diversity, positive attitude, open to change, able to overcome obstacles to making progress towards objectives, interested in learning and applying new technology.

Nice To Haves

• Certified Internal Auditor (CIA), Certified Information System Auditor (CISA) and/or Certified Fraud Examiner (CFE) preferred.
• COSO Certification preferred.
• Proficiency in SharePoint, Microsoft Excel, MS Access, MS Project and/or other project management related applications are helpful.

Responsibilities

• Maintain knowledge of issues in the areas of NERC and CIP Cyber Security regulatory compliance.
• Reduce subject areas and issues to program-level activities which ensure compliance, are easy to comprehend by employees and that incorporate Our Values / Southern Company Culture.
• Assist in developing feedback and monitoring mechanisms to evaluate internal control program effectiveness and to notify management of potential non-compliances to allow for appropriate audit or investigation.
• Gain synergy and support within other functional areas and subsidiary companies to solidify endorsement, acceptance and implementation of system-level programs as well as ensure consistency across Operations.
• Assist in the design, management, direction and oversight of: developing a risk assessment specific to NERC Reliability and CIP Cyber Security Standards compliance; developing a program for identifying, designing and documenting internal controls that support Southern Company’s compliance with NERC Reliability and CIP Cyber Security Standards; developing a program for periodic monitoring and testing of internal controls including the reporting of internal control concerns and recommendations to management; developing program (control framework) documentation to ensure repeatability and consistency in program execution; special projects as directed by the NERC Internal Controls Manager or the Operations Compliance Director.

Benefits

• Competitive base salary
• Annual incentive awards for eligible employees
• Health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being.
• Additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level