Senior CIP Compliance Analyst

Job Description Summary:
The Senior CIP Compliance Analyst will help lead the ongoing implementation,
maturation, and maintenance of SOLV Energy's NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) compliance program. Operating with a high degree of autonomy under the strategic direction of the Senior Program Manager, CIP Compliance, this role will own compliance
monitoring, internal reviews, documentation quality, and audit and regulatory reporting activities. The Senior Analyst serves as a subject matter expert and mentor to fellow analysts, independently scoping and driving initiatives that strengthen adherence to all applicable CIP standards and the organization's
overall cybersecurity compliance posture.

Job Description:

*This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned

Position Responsibilities and Duties:

Compliance Program Leadership

• Own the day-to-day administration of the NERC CIP compliance program, proactively identifying and driving process improvements.
• Lead the development, maintenance, and execution of policies, procedures, and controls aligned with CIP requirements.
• Manage the compliance task calendar, ensuring timely completion of deliverables across contributing teams and holding task owners accountable.

Audit & Assessment Leadership

• Coordinate the preparation and execution activities associated with internal and external audits, selfcertifications, and spot checks.
• Establish and maintain evidence standards that demonstrate compliance with CIP standards, performing quality reviews of evidence prepared by fellow analysts.
• Lead risk assessments, gap analyses, and remediation planning across stakeholder teams, and drive remediation efforts through to closure. Coordinate and execute potential violation and self-report workflows, including root cause analysis, impact scoping, mitigation documentation, and provide recommendations to the Senior Program Manager for Regional Entity submission.
• Conduct structured SME interviews to elicit evidence, assess control effectiveness, and support audit and self-certification readiness.
• Design and execute evidence-gathering strategies ensuring completeness and alignment with CIP evidentiary standards prior to regulatory submission or audit.

Monitoring & Reporting

• Design and maintain compliance metrics; prepare and present program reporting for management and leadership review.
• Independently identify, escalate, and drive resolution of compliance issues and associated mitigation activities.
• Own regular updates to leadership on program performance and emerging risks, including impact analysis of new and revised CIP standards.

Stakeholder Collaboration

• Serve as a trusted advisor to IT, Cybersecurity, OCC IT & Operators, physical security, and other teams, translating CIP requirements into practical, actionable guidance.
• Lead the coordination of responses to regulatory inquiries and requests.
• Champion compliance-related processes and tools, driving adoption and continuous improvement across stakeholder teams.
• Research emerging compliance program technologies and deliver recommendations to leadership for tools that improve monitoring, evidence management, and program scalability.

Training & Awareness

• Develop and deliver CIP compliance and security awareness training programs.
• Ensure employees and contractors understand NERC CIP obligations and responsibilities, tailoring guidance to role-specific risk. Documentation & Recordkeeping
• Set the standard for records of compliance activities and evidence, ensuring adherence to retention requirements.
• Ensure documentation is accurate, consistent, and audit-ready, performing quality reviews of documentation produced across the team.
• Serve as the functional administrator for CIP compliance management platforms and workflows, including configuration support, process improvements, reporting enhancements, and user adoption activities.

Mentorship & Team Development

• Mentor and coach fellow analysts, providing technical guidance, peer review, and support for professional growth.
• Onboard new team members to CIP program processes, tools, and expectations.
• Model self-directed ownership by independently scoping, planning, and executing compliance initiatives with minimal oversight, keeping leadership informed of progress and risk.

Minimum Skills or Experience Requirements:

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, or related field; or equivalent experience.

• Minimum 7+ years of experience working with NERC CIP compliance, including demonstrated ownership of compliance activities or initiatives (required).

• Deep working knowledge of NERC CIP standards and regulatory frameworks, with experience leading or supporting audit and self-certification activities.

• Demonstrated ability to work independently, own initiatives end to end, and mentor or informally lead peers (required).

• Familiarity with SOX, NIST, ISO270001, or other security and compliance standards (preferred).

• Technical knowledge of network infrastructure, industrial control systems (ICS), operational technology (OT), and/or security tools (preferred).

• Strong organizational skills and attention to detail.

• Ability to independently analyze compliance requirements, translate them into actionable plans, and guide others in executing them.

• Strong written and verbal communication skills, with the ability to prepare clear documentation and interact effectively with internal teams, leadership, and regulators.

Applicants must be legally authorized to work in the U.S. without requiring employer sponsorship now or in the future.

Benefits:

Employees (and their families) are eligible for medical, dental, vision, basic life and disability insurance. Employees can enroll in our company's 401(k) plan and are provided vacation, sick and holiday pay.

Compensation Range:

$105,280.00 - $135,845.00

Pay Rate Type:

Salary

SOLV Energy does not accept unsolicited candidate introductions, referrals or resumes from third-party recruiters or staffing agencies. We require all third-party recruiters to communicate exclusively with our internal talent acquisition team. SOLV Energy will not pay a placement fee to any third-party recruiter or agency that has not coordinated their recruiting activity with the appropriate member of our internal talent acquisition team.

In addition, candidate introductions or resumes can only be submitted to our internal talent acquisition recruiting team if a signed vendor agreement is already on file and the third-party recruiter or agency has received formal instructions from our internal talent acquisition team to submit candidates for a particular job posting.

Any unsolicited candidate introductions, referrals or resumes sent by third-party recruiters to SOLV Energy or directly to any of our employees, or received through our website or career portal, will be considered property of SOLV Energy and will not be eligible for a placement fee. In the event a third-party recruiter submits a resume or refers a candidate without a previously signed vendor agreement, SOLV Energy explicitly reserves the right to pursue and hire the candidate(s) without financial liability to such third-party recruiter.

Job Number:

If you're interested in a meaningful career with a brighter future, join the SOLV Energy Team.