POSITION SUMMARY

Supports and executes Energy Management System (EMS) and Protection & Controls (P&C) compliance activities to ensure adherence to regulatory and cybersecurity standards, with a strong focus on NERC CIP requirements. Independently performs compliance activities, maintains compliance processes, procedures, and documentation, and coordinates recurring compliance obligations required to meet established regulatory obligations. Supports audit readiness by preparing, organizing, and maintaining compliance evidence, supporting documentation reviews, and assisting with responses to audit requests and regulatory inquiries. Tracks recurring compliance requirements through established workflows, ensuring tasks are completed accurately and on schedule, and supports corrective action planning and remediation activities arising from audits, self-certifications, and gap assessments.

Serves as a technical subject matter expert responsible for ensuring compliance, governance, and audit readiness of EMS, SCADA, and P&C infrastructure in accordance with applicable NERC Reliability Standards, including CIP compliance. Evaluates current work practices, identifies compliance gaps, supports vulnerability and configuration tracking, and recommends improvements to strengthen the overall compliance posture. Provides training and guidance to personnel on CIP requirements and work methods. Interprets regulatory requirements and applies internal compliance guidance on day-to-day operational and engineering activities.

DUTIES & RESPONSIBILITIES

• Supports EMS and P&C compliance activities to ensure adherence to NERC/CIP standards, including interpretation and application of applicable requirements to operational and engineering environments.
• Develops, executes, maintains, and continuously improves compliance processes, procedures, and documentation.
• Provides training on compliance standards, processes, procedures, and documentation.
• Develops and enhances compliance tracking tools, templates, reporting mechanisms, and compliance dashboards.
• Identifies procedural gaps from compliance standards and proposes resolutions, including risk-based recommendations for remediation and control improvements.
• Develops action plans for implementing recommendations from regulators and consultants during audits / gap analyses and supports tracking through closure, including correction action validations.
• Coordinates the collection, preparation, and organization of compliance evidence for submission during audits, self-certifications, and regulatory inquiries.
• Conducts audit preparation activities, including walkthroughs, control validation, and quality checks.
• Supports management during regulatory audits, and vulnerability assessments, including preparation and presentation of compliance evidence and direct interaction with auditors as needed.
• Tracks and monitors recurring compliance requirements, ensuring timely and accurate completion of assigned tasks, and supports corrective action tracking and remediation validation through closure.
• Reviews compliance evidence to ensure accuracy and alignment with applicable compliance standards.
• Conducts compliance reviews to identify gaps or inconsistencies in compliance practices and escalates issues as appropriate, including potential regulatory risk exposure.
• Informs management of potential or actual violations and proactively recommends countermeasures and mitigations.
• Interprets regulatory and internal compliance requirements and apply them to daily operational activities, including EMS, SCADA, and P&C environments.
• Provides administrative and coordination support for compliance-related projects and initiatives.
• Leads and documents disaster recovery testing events, including validation of results against compliance requirements, and ensures procedure accuracy.
• Assists in the development and submission of mitigation plans, including tracking, validation, and closure of corrective actions.
• Completes and reviews documentation, including RSAWs, prior to self-certifications and audits, ensuring control mapping accuracy and evidence sufficiency.
• Supports asset commissioning and decommissioning by providing guidance on required tasks, documentation, and evidence to ensure adherence to compliance standards.
• Conducts scheduled reviews of ports and services reports to verify alignment with approved system baselines, coordinates with system owners to validate exceptions, remediates non-compliant configurations, and ensures all actions are properly documented in accordance with CIP requirements and change management processes.
• Represents EMS and P&C compliance activities during committee meetings, providing updates on ongoing initiatives, risk areas, and proposed enhancements.
• Participates in FERC/NERC/SERC/NATF groups to learn industry best practices and help implement those at JEA.
• Collects compliance evidence from field devices located at substations and control centers.
• Provides leadership and example in meeting JEA's safety and wellness goals.
• Perform other job-related duties as assigned.

Qualifications

Education : A bachelor's degree in engineering, computer science, or a related field

AND

Experience : Three (3) years of progressively responsible experience in one or more of the following:

• NERC CIP compliance
• EMS/SCADA/Energy Management System engineering or support
• Protection & Controls (P&C) systems in an electric utility
• Industrial control system (ICS) or Operational Technology (OT) cybersecurity or compliance
• Utility regulatory compliance, auditing, or risk management
• Utility experience is preferred.

OR

An equivalent combination of education, experience, and/or training.

License/Certifications/Registrations :

• A valid driver's license is required prior to employment and must be maintained during employment in this classification.
• CISSP, CISA, CRISC, GICSP, or similar cybersecurity or compliance certification is preferred.

The salary for this position is $94,500 - $157,500 annually. Compensation will be determined based on education, licenses, certifications, skills, experience, and alignment with salaries for similar roles within the organization.

PHYSICAL REQUIREMENTS .

Sitting

Up to 8 hours per day

Lifting

Up to 2 hours per day

Walking

Up to 5 hours per day

Up to 50 max. pounds **

Standing

Up to 3 hours per day

Pushing

Up to 1 hour per day

Bending

Up to 3 hours per day

Up to 50 max. pounds**

Squatting

Up to 2 hours per day

Pulling

Up to 1 hour per day

Stooping

Up to 2 hours per day

Up to 50 max. pounds**

Reaching

Up to 2 hours per day

Climbing

Up to 1 hour per day

Balancing

Up to 1 hour per day

Stairs

Up to 1 hour per day

Twisting

Up to 1 hour per day

Ladder

Up to 1 hour per day

Crawling

Up to 1 hour per day

Step-stool

Up to 1 hour per day

Kneeling

Up to 1 hour per day

Excessive heat

Up to 5 hours per day

Typing

Up to 5 hours per day

Excessive cold

Up to 1 hour per day

Data Entry

Up to 5 hours per day

Dust

Up to 1 hour per day

Humidity

Up to 5 hours per day

Loud Noise

Up to 1 hour per day

Hands in Water

Will not generally apply

Unusual hearing or vision demands:

Other physical demands or notes:

**JEA employees should not attempt to lift, pull or push a load in excess of 50lbs. without assistance. Care should always be taken when lifting, pushing or pulling in an awkward position.