Bachelor's degree in Cybersecurity, IT, Engineering, or related field
5+ years of experience in NERC CIP compliance, cybersecurity, or electric utility operations
Professional certifications such as CISSP, CISA, GICSP, or PMP preferred
Proven leadership experience in managing teams or projects
In-depth knowledge of NERC CIP standards and regulatory processes
Responsibilities
Lead and mentor the CIP Compliance Analyst(s), providing guidance and performance feedback
Oversee the development and continuous improvement of CIP compliance programs and policies
Coordinate internal audits and self-assessments to ensure compliance with NERC CIP standards
Serve as the primary contact for regulatory audits and data requests related to CIP
Monitor changes to NERC standards and assess their impact on the organization
Collaborate with IT, OT, and operations teams to ensure cross-functional compliance
Manage compliance documentation and reporting using GRC tools
Benefits
Promote a culture of compliance and cybersecurity awareness across the organization
Facilitate incident response and reporting for CIP-related events
Represent the organization in industry forums and regulatory discussions
Full Job Description
Pay Grade: M09
POSITION SUMMARY
The CIP Compliance Team Leader is responsible for overseeing the implementation and maintenance of the organization's compliance with NERC Critical Infrastructure Protection (CIP) standards. This leadership role guides a team of analysts and collaborates across departments to ensure the security and reliability of Bulk Electric System (BES) Cyber Systems. The Team Leader supports audit readiness and regulatory engagement, coordinates and monitors compliance activities with Subject Matter Experts and Standard Owners and informs stakeholders of compliance obligations and performance.
DUTIES AND RESPONSIBILITIES
Lead and mentors the CIP Compliance Analyst(s), providing guidance, training, and performance feedback.
Oversee the development, execution, and continuous improvement of CIP compliance programs, policies, and procedures.
Coordinate internal audits, self-assessments, and mitigation plans to ensure compliance with NERC CIP standards.
Serve as the primary point of contact for regulatory audits, spot checks, and data requests related to CIP.
Monitor changes to NERC standards and industry best practices, and assess their impact on the organization.
Collaborate with IT, OT, physical security, and operations teams to ensure cross-functionalcompliance.
Manage compliance documentation, evidence collection, and reporting using GRC tools.
Facilitate incident response and reporting for CIP-related events, including root cause analysis and corrective actions.
Represent the organization in industry forums, working groups, and regulatory discussions related to CIP.
Promote a culture of compliance and cybersecurity awareness across the organization.
JOB SPECIFICATIONS
Education:
Bachelor's degree in Cybersecurity, Information Technology, Engineering, or related field minimum
Professional certifications such as CISSP, CISA, GICSP, or PMP preferred
Experience:
5 years' experience in NERC CIP compliance, cybersecurity, or electric utility operations minimum
Skills and Abilities:
Proven leadership experience in managing teams or projects.
In-depth knowledge of NERC CIP standards and regulatory processes.
Strong communication, organizational, and analytical skills.
Experience with audit preparation and regulatory engagement.
Familiarity with SCADA, EMS, and other operational technology environments.
