Manager, Asset Compliance (CIP)

RWE Clean Energy, LLC

Functional area: Regulation / Risk Management 

Remuneration: Exempt

This Manager, Asset Compliance (CIP) supports the RWE Clean Energy Internal Compliance Program established to maintain compliance with mandatory North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards. Individuals at this level manage work in multiple areas of specialization, with minimal supervision. CIP activities may include cause analysis, audit preparation, self-reports, mitigation plans, data requests, and other NERC activities.

The successful candidate will be expected to promote an understanding of compliance responsibilities for the organization, facilitate education and training to achieve and sustain compliance success. The position will require staying current and acquiring information on best practices that may be implemented in support of our reliability functions.

Responsibilities: 

• Contributes to the ongoing strategy of the NERC CIP compliance program to meet regulatory and company requirements
• Demonstrates a broad knowledge of NERC CIP compliance controls, regulatory matters, and business applications
• Performs investigative analysis and identifies risks and recommendations
• Maintain sound technical understanding of NERC compliance monitoring and enforcement processes
• Coordinate proactive development of procedures, processes, and recordkeeping of evidence with internal departments to ensure compliance with NERC CIP Standards and Requirements
• Serves as an interface between stakeholders, team members, business units, support groups, contractors, and vendors to ensure appropriate communication and problem resolution
• Coordinate meeting forums and subject matter to communicate requirements
• Provide excellent customer support to deliver compliance results to internal and external parties
• Demonstrates in-depth understanding of applicable NERC CIP Standards
• Facilitate periodic internal compliance assessments and spot-checks on applicable CIP standards
• Collaborate with applicable business areas to identify and implement technologies to automate and streamline compliance monitoring and reporting processes
• Participate in the evaluation and mitigation of potential CIP compliance concerns
• Assist in developing responses to regulatory compliance requests, enforcement actions, and data reporting from a NERC CIP compliance perspective
• Participate in industry focus groups and conferences to share information and stay on top of the constantly evolving NERC compliance landscape
• Identifies areas for improvement, providing critical feedback regarding the NERC CIP Compliance Program to promote continuous improvement and improve the compliance, security, and efficiency of the CIP department
• Other duties as assigned

Qualifications:

• Bachelor’s degree with a concentration in Computer Science, Engineering, Information Management Systems or related concentration. In lieu of a degree (if applicable), at least ten (10) years of experience in NERC compliance will be considered
• Cybersecurity certifications such as CISSP, CISA, and Security+ are a plus
• Knowledge and/or experience working with Distributed Control Systems (DCS) or Energy Management Systems (EMS)
• Minimum 8 years experience in plant control equipment or IT network principles
• NERC CIP experience
• Experience preparing evidence and participating in NERC CIP audits
• CIP audit experience for the Generator (GO) and Generator Operator (GOP) function
• Minimum 3 years of experience developing or managing an IT/OT (operational technology) program
• Working knowledge of network equipment such as firewalls, switches, and routers
• Experience in the concepts of protection of assets by means of patching and Antivirus/Antimalware, applying security updates and security monitoring
• System management experience
• Working knowledge of security, industrial controls, networking concepts, and security tools
• NERC Portal Admininstarive applications: Align, NERC Alerts, Evidence Reporting Tool (ERT)
• Demonstrated ability to develop internal controls
• Demonstrated presentation and development skills
• Demonstrated project management skills
• Demonstrated analytical and problem-solving skills
• Demonstrated ability to set priorities and respond to changing demands from multiple sources
• Demonstrated ability to work independently and as a team member in a collaborative environment
• Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards
• Outstanding communication skills and ability