Position SummaryThe Security and Compliance Consultant within Enterprise Security Services (ESS) is responsible for the governance, execution, and continuous improvement of OT regulatory compliance programs aligned with NERC CIP and TSA security directives, ensuring effective management of regulatory obligations through internal controls, compliance assessments, evidence management, audit readiness, and continuous monitoring. This role provides expert guidance to business units, application owners, and technology teams to drive alignment with regulatory requirements, strengthen control effectiveness, and reduce compliance risk while establishing clear ownership, standardized processes, and meaningful metrics that deliver leadership visibility into control performance, audit readiness, and remediation progress. Additionally, the position maintains and enhances ESS policies, procedures, tools (e.g., Archer eGRC platform), and processes to enable sustainable, defensible compliance practices and support effective responses to audits, inspections, and regulatory inquiries.
Essential Responsibilities- Operations Management: Lead and execute OT compliance programs across NERC CIP and TSA requirements, including internal controls, assessments, and audit readiness. Identify and mitigate compliance risks through data analysis, control performance, and audit insights while ensuring accuracy and integrity of compliance evidence and reporting.
- Process Management: Design, operate, and continuously improve standardized compliance processes and tools (e.g., Archer) supporting evidence management, control execution, and regulatory reporting. Ensure processes are sustainable, traceable, and audit-defensible while driving efficiency and incorporating regulatory guidance and lessons learned.
- Training / Communications: Deliver targeted training and guidance to stakeholders to ensure clear understanding of compliance responsibilities, regulatory requirements, and ESS processes. Develop and track metrics and KPIs to measure control effectiveness, audit readiness, and overall program maturity.
- Relationship Management: Serve as a primary compliance liaison across ESS, Technology Services, Transmission, and Generation, and coordinate with auditors and regulators. Drive accountability, clarify ownership, and incorporate stakeholder feedback to enhance compliance processes, tools, and governance practices.
Minimum requirements: - Bachelor's degree in technology, Science, Business or related field, or 4 years of experience equivalent to the position.
- Seven years of related functional experience.
- At least 2 years of experience using project management tools, techniques and communication processes, or equivalent demonstrated knowledge and skills.
- Experience in IT, Supply Chain or Security. Demonstrated experience in project management activities.
- Expertise in NERC and TSA policy and regulation compliance.
- Demonstrated ability to work in a diverse, regulated and rapidly changing business environment.
- Previous management of core business processes with proven ability to learn processes and cut waste and continuously improve solutions.
- Excellent communication skills, effective with varying organizational levels and skill set, and able to translate between technical and non-technical concepts.
- Excellent Relationship Management and collaboration skills, with a track record of working as one team cross-organizationally to drive innovation and business results.
- Demonstrated proficiency using Archer eGRC platform strong preferred.
Non-Bargaining
The anticipated starting base pay for this position is: $97,600.00 to $138,600.00 per year
This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave
Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part.
In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information.
Deadline to Apply: 08/23/26
All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility.
ACCESSIBILITY STATEMENTXcel Energy endeavors to make https://www.xcelenergy.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at
[email protected]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.
