Requisition ID: 20627
SummaryAs part of SRP's Compliance Center of Excellence (CCoE), the Senior Regulatory Compliance Analyst supports the Operational Technology (OT) teams that operate and secure the critical infrastructure networks underpinning the bulk electric system.
Combining regulatory expertise with technical awareness, the Analyst translates requirements into practical processes, strengthens internal controls, and improves audit readiness. Working closely with OT teams and the broader CCoE network, the Analyst helps maintain clear and defensible compliance positions that support the secure, reliable operation of these networks and SRP's delivery of uninterrupted power to customers.
What You'll Do- Serve as a compliance champion, applying CCoE standards, workflows, templates, and evidence practices.
- Translate regulatory requirements into practical, technically grounded guidance for OT teams.
- Identify compliance gaps and collaborate with technical partners to recommend solutions.
- Define and refine internal controls, documentation expectations, and audit readiness criteria across OT domains.
- Support internal and external audits by developing narratives, preparing evidence, and defending compliance positions.
- Contribute to the continuous improvement of SRP's internal controls program and compliance frameworks.
- Monitor regulatory developments and assess their impact on SRP's compliance strategy and operations.
- Build strong relationships with process owners to promote accountability and uphold compliance expectations.
- Mentor other analysts and serve as a backup for core CIP compliance functions.
- Support the future expansion of compliance oversight to include O&P standards.
- Travel to SRP facilities as needed to support compliance activities and stakeholder engagement.
EducationA bachelor's degree relevant to the assignment from an accredited institution is preferred.
ExperienceThis position may be filled at one of two levels outlined below, based on the candidate's relevant education, experience, or a combination of both that demonstrates the required knowledge, skills, and competencies.
Level 2 - Journey: Minimum 2 years of relevant experience required. In lieu of a degree, 6 years of relevant experience or an equivalent combination of education and experience totaling 6 years may be considered.
Level 3 - Senior: Minimum 5 years of relevant experience required. In lieu of a degree, 9 years of relevant experience or an equivalent combination of education and experience totaling 9 years may be considered.
Eligibility for advancement (progression) to the next level in the same role is based on overall job performance, mastery of all functional responsibilities, and time in position, as assessed by the supervisor.
Additional Requirements and Qualifications- Demonstrate a team-first mindset by prioritizing the success of the team, maintaining a collaborative and approachable working style, and exhibiting strong interpersonal, verbal, and written communication skills.
- Strong understanding of NERC CIP standards; familiarity with O&P standards or willingness to develop that expertise.
- Experience working in or supporting OT, infrastructure, cyber security, or electric utility operations, particularly control centers, telecommunication networks, and emergency management systems.
- Familiarity with security information and event management (SIEM) systems and configuration management tools.
- Working knowledge of foundational OT cyber security practices.
- Ability to interpret technical architecture and apply compliance requirements in a practical, defensible way.
- Demonstrated ability to design, implement, and sustain internal controls and governance frameworks.
- Effective communication and influencing skills, with the ability to guide process owners and collaborate across diverse technical teams.
- Strong analytical, organizational, and problem-solving skills with a continuous improvement mindset.
- Ability to manage competing priorities in a dynamic environment.
- Valid driver's license.
Hybrid WorkplaceSRP currently offers a hybrid workplace, which allows employees whose jobs can be performed remotely, and who have sufficient technical capability, to telework up to three days per week. Although teleworking is available, all employees must live and work in Arizona.
