Regulatory Compliance Associate

What you will do

Role Overview:

Focus on assisting in the managing of the NERC CIP compliance program as well as other regulatory compliance programs to support and align with EDPR NAs cybersecurity posture and the associated regulatory requirements. Contributes to the on-going strategy of the compliance program to meet regulatory and company requirements.

Main responsibilities:

Facilitate cross-department coordination of NERC CIP Standards: (20%)

o Collaboratively work on audit preparation and management of Reliability Standard Audit Worksheet (RSAW) development.

o Coordinate with applicable departments to ensure compliance with NERC CIP.

o Report of potential noncompliance in NERC Align system and the Secure Evidence Locker.

o Drafting self-reports and mitigation plans as needed.

Ensure the development of processes workflows and evidence required for compliance to the CIP standards for which NERC CIP Assurance is accountable: (20%)

o Collaboratively work to ensure the development of processes workflows and evidence required to meet the CIP Security Controls developed and implemented by the NERC CIP Assurance team.

o Collaboratively work with all other NERC CIP applicable business areas to develop processes workflows and evidence necessary to achieve the NERC CIP compliance objectives.

o Provides input on process improvements to NERC CIP Compliance program.

o Identifies resolves and escalates as needed more complex program issues.

o Identify areas for improvement and take action to resolve.

Build strong relationships with business partners and other stakeholders (NERC and Regional Entities). (20%)

Establish positive team environment by proactively assisting and training less experienced personnel. (15%)

Proactively engages in training and development programs to improve and maintain job performance and promote professional growth and development. (10%)

Support other regulatory needs of the company (15%)

Integrate and align information security and/or cybersecurity policies to ensure system analysis meets regulatory security requirements.

Lead and align information technology (IT) security priorities with the security strategy.

Interpret and apply laws regulations policies standards or procedures to specific with stakeholders to establish the enterprise continuity of operations program strategy and mission assurance.

Interpret and apply applicable laws statutes and regulatory documents and integrate into policy.

Define and implement policies and procedures to ensure protection of real time critical infrastructure and meet regulatory commitments.

Assist in development analysis maintenance and training of EDPR NAs policies procedures standards and other systematic preventive measures developed to ensure adherence with applicable compliance requirements and industry best practices.

Employment type

Full Time

Work site

Hybrid - Houston TX

What are we looking for

Minimum Requirements:

Bachelors degree in Computer Science or related discipline and 5-8 years of related experience or in lieu of a degree 9-12 years of relevant work experience.

Strong knowledge of business practices and processes in a regulatory environment specifically NERC CIP.

Experience leading projects or teams and knowledge of project management.

Experience with CIP specific audit skills controls cyber and physical security and related industry regulatory issues- preferred.

NERC and Regional portal administration applications: Align Evidence Reporting Tool- preferred.

Experience writing program level documentation (Policies Processes and Procedures)- preferred

Travel:

Up to 5%

Behavioral Requirements:

Strong problem solving and analysis ability.

Excellent communications skills (written and verbal). Able to present complex information both verbal and written to multiple levels of the organization.

Ability to lead remote project teams and individuals.

Strategic forward thinking solid planning and organizational skills

Physical demands & working conditions:

Sitting/Standing/Flexibility: Ability to stand and sit for 8 or more hours when in an office environment.

Walking: Ability to walk 0.5 to 2 miles per day including across unpaved and rough surfaces when on project sites.

Speech/Reading: Ability to speak read and write English proficiently and deliver a variety of instructions furnished in written verbal diagram or scheduled form.

Lifting: Ability to lift items weighing up to 10 pounds.

Vision/Hearing: Ability to understand a variety of instructions furnished in written verbal diagram or schedule form.