Compliance Specialist, Engineering

Job Description

First Energy at a Glance

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers' lives brighter, the environment better and our communities stronger.

First Energy (NYSE: FE) is dedicated to integrity, safety, reliability and operational excellence. Headquartered in Akron, Ohio, First Energy includes one of the nation's largest investor-owned electric systems, more than 24,000 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of more than 3,500 megawatts.

About the Opportunity

All employees who apply for a posted position must notify their supervisors that they have applied. Employees who have not been in their current positions for at least one year, or who are in positions with specific requirements beyond one year, must obtain approval from their supervisor before applying.

Responsibilities include:

Reporting to the CIP Asset Policy & Reporting Manager, the responsibilities of this position include assisting with the development and ongoing monitoring and training of Power Delivery staff the required asset policies and procedures to comply with First Energy and North American Electric Reliability Corporation (NERC) policies and procedures.

The analyst will be responsible for:

• Revising existing and developing new Power Delivery cyber asset work practices and procedures in coordination with Transmission Protection & Planning, Transmission Engineering, Project Management, Power Delivery Operations, and Information Technology departments.

• Improving First Energy processes associated with the initiation of transmission work, both maintenance expense and capital, to ensure compliance to NERC Critical Infrastructure Protection (CIP V5) guidelines.

• Maintaining and revising as needed First Energy (FE) compliance program infrastructure including the administration and maintenance of compliance policies, programs, and procedures related to the North American Reliability Corporation (NERC) CIP Reliability Standards.

• Have a working knowledge of work management processes of related systems in CASCADE, Power Base, EDOA, File Net (Content Navigator), and SAP. Additional training of these systems will be trained as needed.

• Develops and conducts initial and ongoing training on Asset Policy & Reporting procedures.

• Work with Transmission stakeholders and employees to address questions and provide consistent policy and procedure interpretations.

• Recommend improvements to processes associated with cyber asset installation, removal, and modifications.

• Lead and participate in weekly CIP Medium Impact and Low Impact Change Control meetings to ensure all cyber assets changes are recorded as audit evidence.

• Participate & prepare evidence for periodic audits performed by NERC which assess First Energy's (FE) compliance with the NERC Reliability Standards (gather evidence, draft responses, prepare witnesses, etc.)

• Maintain systems to track/monitor compliance with the NERC reliability standards.

• Investigate system events to determine if compliance was maintained during the events.

• Respond to requests for information (RFIs) from NERC Regional Entities and other regulators.

• Proactively identify areas of risk in First Energy's (FE) compliance with the NERC Reliability Standards and develop solutions to mitigate those risks.

• Collaborate with other First Energy (FE) business units to compile and validate evidence.

• Must be comfortable ensuring timely completion of all compliance deliverables as required by the NERC reliability standards.

• Ability to perform in-depth reviews of business unit processes, procedures, and related controls to determine the effectiveness of reliability standards adherence and compliance practices.

• Develop performance measures and monitoring tools to assure compliance with compliance policies and procedures for planned and unplanned work activity.

• Lead discussions to help ensure compliance with policy and procedure and consistency in application among Operating Companies by coordinating monitoring efforts and compiling results from…