Senior Manager, CIP Compliance

RWE Clean Energy, LLC

Functional area: Regulation / Risk Management 

Remuneration: Exempt

The Senior Manager, CIP Compliance manages the RWE Clean Energy Internal Compliance Program established to maintain compliance with mandatory North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards. This role is responsible for the CIP team as direct reports. Individuals at this level manage work in multiple areas of specialization, with minimal supervision. CIP activities may include cause analysis, audit preparation, self-reports, mitigation plans, data requests, and other NERC activities.

The successful candidate will be expected to promote an understanding of compliance responsibilities for the organization, facilitate education and training to achieve and sustain compliance success. The position will require staying current and acquiring information on best practices that may be implemented in support of our reliability functions.

Responsibilities:

• Along with the Director, Asset Compliance, develops the internal compliance monitoring program requirements related to the CIP each year and effectively completes the program requirements
• Demonstrates a broad knowledge of NERC CIP compliance controls, regulatory matters, and business applications
• Leads CIP compliance activities for administrative compliance such as asset classification, policy and procedure development, updates and access management
• Provides leadership and mentoring to the CIP Team in support of team performance, efficiency and personnel development
• Performs investigative analyses and identifies risks and recommendations
• Maintains sound technical understanding of NERC compliance monitoring and enforcement processes
• Coordinates proactive development of procedures, processes, and recordkeeping of evidence with internal departments to ensure compliance with NERC CIP Standards and Requirements
• Serves as an interface between stakeholder, team members, business units, support groups, contractors, and vendors to ensure appropriate communication and problem resolution
• Coordinates meeting forums and subject matter to communicate requirements
• Provides excellent customer support to deliver compliance results to internal and external parties
• Demonstrates in-depth understanding of applicable NERC CIP Standards
• Facilitates periodic internal compliance assessments and spot-checks on applicable CIP standards
• Collaborates with applicable business areas to identify and implement technologies in order to automate and streamline compliance monitoring and reporting processes
• Participates in the evaluation and mitigation of potential CIP compliance concerns
• Assists in developing responses to regulatory compliance requests, enforcement actions, and data-reporting from a NERC CIP compliance perspective
• Participates in industry focus groups and conferences to share information and stay on top of the constantly-evolving NERC compliance landscape
• Identifies areas for improvement, providing critical feedback regarding the NERC CIP Compliance Program to promote continuous improvement and improve the compliance, security, and efficiency of the CIP department
• Leads the development, support, and contributes to the ongoing strategy of the CIP compliance program to meet regulatory and company requirements
• Other duties as assigned

Qualifications:

• Bachelor’s degree with a concentration in Computer Science, Engineering, Management Information Systems or related concentration
• In lieu of a degree (if applicable), at least ten (10) years of experience in NERC compliance
• Cybersecurity certifications such as CISSP, CISA, Security+ a plus

• Knowledge and/or experience working with Distributed Control Systems (DCS) or Energy Management Systems (EMS)
• 5 to 8 years experience in plant control equipment or IT network principles
• NERC CIP experience
• Experience preparing evidence and participating in NERC CIP audits
• CIP audit experience for the Generator (GO) and Generator Operator (GOP) function
• Minimum 3 years of experience developing or managing an IT/OT (operational technology) program
• Working knowledge of network equipment such as firewalls, switches and routers
• Experience in the concepts of protection of assets by means of patching and Antivirus/Antimalware, applying security updates and security monitoring
• System management experience
• Leadership and people management experience, including high performance teams

• Ability to communicate with individuals from different backgrounds
• Working knowledge of security, industrial controls, networking