IT Compliance/Risk Management Analyst Senior

Summary

Assess and oversee all technology-related compliance issues across the organization to ensure the development, implementation, and administration of IT regulatory compliance and licensing programs. In this role, you will collaborate with I&O departments to identify potential non-compliance issues, develop and lead training sessions, notify teams of upcoming compliance deadlines, and support small and large projects with CIP compliance considerations in mind.

Minimum Requirements

• Bachelor's Degree in Information Technology or related field
• PLUS 7 years of prior relevant experience or equivalent combination of education and directly related experience.
• Knowledge of IT, federal and state rules and regulations, company/business unit operations, compliance policies, procedures, and/or programs in area of assignment.
• One year experience working with one or more of the following in a program development role: Sarbanes Oxley, NERC CIP, Export Control, or HIPAA Skill in effective communication to both technical and non-technical audiences.

Preferred Special Skills, Knowledge or Qualifications

• Strong research, analytical, interpretive and organizational skills are required.
• Manage an overarching calendar of events with consistent results.
• Leading large efforts across multiple business units.
• Proficiency in collaboration, spreadsheet, word processing, graphics, and other software applications utilized within area of assignment.
• Demonstrated effective verbal and written communication and interpersonal skills.

Major Accountabilities

1. Lead IT regulatory staff in the development, implementation and administration of IT regulatory compliance and licensing programs in area of assignment.
2. Primary responsibility for development and/or administration of one or more regulatory programs which may include policy creation, communication, compliance and interpretation
3. Initiate, coordinate, analyze, draft, and review a variety of documentation such as licensing applications and renewals, regulatory requirements and communications, compliance governance, finding/issue summaries, responses, and other materials relating to CIP compliance regulations and procedures.
4. Ensure accurate and timely preparation and filing of required licenses and reports to government and regulatory agencies.
5. Coordinate with other departments within the Company to ensure compliance with applicable regulations, including identification and oversight of exception situations.
6. Review and provide guidance of department actions to mitigate exceptions and audit implementation success.
7. Evaluate and provide guidance on the impact of regulatory decisions in area of expertise.
8. Direct changes to processes, procedures, administrative controls, and/or documentation to ensure compliance with applicable rules and regulations and maximize program effectiveness.
9. Lead interpretation and advisement on new and changing federal, state, and other regulatory agencies' rules and regulations.
10. Consult with IT and business leaders regarding short- and long-term impact of changes.
11. Develop and deliver training and oversight related to regulatory issues within assigned area. Identify training needs and opportunities and develop program objectives and design.
12. Ensure compliance with applicable laws and regulations by leading the performance of audits and spot checks of existing processes, procedures, IT systems, and associated compliance evidence.
13. Research issues identified through audit process. Implement and/or recommend corrective action.
14. Maintain a high degree of knowledge of appropriate laws and regulations for the assigned area or technical specialty.
15. Represent Company in various industry and governmental forums, committees, and working groups dealing with regulatory issues.

Key Level Differentiators:
- Analyzes and resolves multi-dimensional technical problems using broad and deep experience and relationships
- Coordinates across diverse stakeholders
- Works on large projects or initiatives
- Supports multiple requests affecting multiple solutions
- Requires outside support to make large decisions within area of direct responsibility

CIP Requirement:

This position requires Critical Infrastructure Protection (CIP) access consistent with North American Electric Reliability Corporation (NERC) standards. The applicant considered for this role will be required to obtain and maintain CIP access for the duration of employment in this position. A full seven (7) year criminal history will be obtained through the pre-employment background check process (or, for current employees, through supplemental background check process) to fulfill the CIP access requirements. In addition, this position requires an additional background check every seven years to maintain access.

Home based:Home based employees primarily work from their home offices and come into an APS facility on an as-needed basis.

• Employees are expected to reside in Arizona (or New Mexico for Four Corners-based employees).
• Working from a home office requires adequate technology and an appropriate ergonomic set up.
• Role types are subject to change based on business need.