Principal Compliance and Risk Analyst

Requisition ID:  86006 

Florida Power & Light Company is the largest electric utility in the U.S., delivering clean, affordable, and dependable electricity to over 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!

 

Position Specific Description

This selected candidate for this role will be a member of the Program Management team within the NERC CIP Center of Excellence focused on identifying, specifying, and continuously monitoring indicators of NERC Critical Infrastructure Protection (CIP) compliance across all of NextEra.  This position will lead in planning, developing, and implementing a comprehensive NERC Critical Infrastructure Protection (CIP) compliance program. Program components will include establishing a governance model for the execution of enterprise processes related to each of the applicable CIP standards / requirements.  This opportunity will also include leading efforts associated with continuous improvements focusing on automation and sustainable, enterprise-wide processes for each of the applicable CIP standards.
 

Position specific responsibilities include the following skillsets: 
•    Develops and maintains processes and procedures at an enterprise level to facilitate the execution and demonstration of NERC CIP standards.
•    Leads coordination to collect evidence and demonstration of compliance for during audits, self-assessments, and data requests from Reginal Entities.
•    Leads actual audit demonstrations for Reginal Entities CIP audits.
•    Lead the support of compliance execution activities with respect to quality assurance of process and evidence retention. 
•    Identify root cause of process failures.
•    Provide solutions to improve process capability assessments for completeness, accuracy, quality of evidence, failure modes, and ability to satisfy compliance.
•    Identify failure modes and determine the processes defect escape probability (FMEA).
•    Identify methods to design, measure, implement, and assess Internal Controls for effectiveness to reduce inherent risk of failure mode.
•    Identify inherent risk within a process and residual risk after internal controls are implemented.
•    Develop and measure metrics to monitor compliance.
•    Develop and implement opportunity for improvements.

 

The position’s primary location is Lejeune Flagler Office (LFO) located in Miami, FL, but is open to Jupiter West (JW), located in Jupiter, FL

Job Overview

This job supports teams facilitating internal solution development across business units, to align Cybersecurity risk, leading technology solutions, and user experience. This position is responsible for various aspects of achieving compliance of cybersecurity including developing, implementing and enforcing IT policies, standards, methodologies and awareness using a risk based approach. Employees in this role develop a deep understanding of NextEra’s technology footprint, technology strategy, threat landscape and risks, to establish a collective Cyberstrategy.

Job Duties & Responsibilities

• Builds processes and tools to provide the business visibility of cybersecurity risks and drive accountability
• Develops and maintains policies, standards, processes, and procedures to assess, monitor, report, escalate and remediate cyber risk while maintaining corporate compliance with mandated security regulations
• Assesses and reviews security and controls to ensure sustainable regulatory compliance
• Develops processes and monitoring to identify, quantify, analyze, and report risk and compliance status
• Coordinates cyber risk management efforts including identification, assessment, tracking and resolution of risk management activities across all levels of the organization
• Assists with training, including training material development and deployment to ensure that compliance and risk becomes a sustainable business practice
• Gathers and prepares documentation to su