Qualifications:
AES Clean Energy is seeking a highly technical NERC CIP Compliance Senior Technical Auditor to provide leadership, independent oversight, and expert guidance in maintaining continuous compliance with the NERC CIP Standards that support the reliable operation of the Bulk Electric System. This role requires a strong technical foundation in cybersecurity, operational technology, and control system environments, along with the ability to perform detailed technical assessments, validate complex security controls, and interpret technical evidence with precision. As a key member of the Compliance team, this position plays a critical role in driving a robust, technically sound culture of NERC CIP compliance across the organization.-system environments, along with the ability to perform detailed technical assessments, validate complex security controls, and interpret technical evidence with precision. As a key member of the Compliance team, this position plays a critical role in driving a robust, technically sound culture of NERC CIP compliance across the organization.
Primary Duties and Responsibilities
- Demonstrate deep expertise in applicable NERC CIP Standards (CIP-002 through CIP-014).
- Maintain strong technical knowledge of NERC compliance monitoring and enforcement processes.
- Clearly and concisely communicate NERC compliance requirements, standards, and expectations to Subject Matter Experts (SMEs).
- Conduct periodic internal compliance assessments and spot checks to verify adherence to applicable Standards.
- Monitor updates to new and existing CIP Standards, and coordinate comments from internal SMEs for industry commenting and balloting activities.
- Support legal and project management teams by defining scopes of service for third-party contractors and reviewing contract changes for alignment with NERC Standards.-party contractors and reviewing contract changes for alignment with NERC Standards.
- Participate in evaluating potential compliance concerns as a member of the NERC compliance team.
- Collaborate with IT and OT teams to identify, recommend, and implement technologies that automate and streamline compliance monitoring and reporting processes.
- Apply knowledge of NERC monitoring and enforcement processes to develop solutions and recommendations for compliance issues.
- Serve as a liaison between NERC Compliance and internal stakeholders on all compliance related matters. Related matters.-related matters.
- Engage in industry focus groups and conferences to remain informed about evolving NERC compliance expectations and best practices.
- Lead responses to regulatory requests, enforcement actions, and data reporting obligations from a NERC CIP perspective reporting obligations from a NERC CIP perspective-reporting obligations from a NERC CIP perspective.
Skills and Experience
- Bachelor's degree in Computer Science, Information Systems/Security, Computer or Systems Engineering, or a related technical field, with 6-10 years of NERC CIP experience demonstrating ability to perform required responsibilities.
- Foundational knowledge of information technology, cybersecurity, operations technology, networking systems, and/or EMS operations.
- Experience participating in IT audits and implementing or overseeing security and internal controls.
- Strong leadership, interpersonal, analytical, and time management skills.-management skills.
- Proven ability to work effectively and lead across multiple organizations and stakeholder groups.
- Experience with Industrial Control Systems (ICS).
- Excellent verbal and written communication skills.
- Ability to manage, prioritize, and execute multiple priorities and projects in a dynamic environment.
- Experience performing internal spot checks and compliance assessments.
- Hands-on experience supporting or monitoring a NERC CIP compliance program.
- Highly motivated self-starter with a strong desire to take on new challenges.-starter with a strong desire to take on new challenges.
- Previous CIP and GO/GOP/TO/TOP compliance experience including monitoring, training, and audit support.
- Exceptional attention to detail and commitment to fostering a culture of compliance.
- Strong project management capabilities.
- Proficiency with Microsoft Word, Excel, PowerPoint, and SharePoint.
- Ability to apply one or more risk management frameworks (preferred but not required).-management frameworks (preferred but not required).
- Optional but beneficial certifications: CISA, CIA, Security+.
The expected salary for this position, at commencement of employment, is between $100,000 and $124,950/year; however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position also includes annual bonus. The benefits offered for this position are: medical, dental, and vision coverage, life insurance, 401(k) eligibility, and paid time off (including vacation, sick leave time, and parental leave). Details of participation in these benefit plans will be provided if a candidate receives an offer of employment. If hired, employee will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.
Apply by clicking the application link below and submitting your information. The deadline to apply for this role is
