Senior CIP Compliance Analyst

SOLV Energy is a leading provider of infrastructure services to the power industry, designing, building and maintaining utility scale solar, battery storage and high voltage substation projects nationwide.

The Senior CIP Compliance Analyst will help lead the ongoing implementation, maturation, and maintenance of SOLV Energy’s NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) compliance program. Operating with a high degree of autonomy under the strategic direction of the Senior Program Manager, CIP Compliance, this role will own compliance monitoring, internal reviews, documentation quality, and audit and regulatory reporting activities.

The Senior Analyst serves as a subject matter expert and mentor to fellow analysts, independently scoping and driving initiatives that strengthen adherence to all applicable CIP standards and the organization’s overall cybersecurity compliance posture.

• This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned

• Own the day-to-day administration of the NERC CIP compliance program, proactively identifying and driving process improvements.
• Lead the development, maintenance, and execution of policies, procedures, and controls aligned with CIP requirements.
• Manage the compliance task calendar, ensuring timely completion of deliverables across contributing teams and holding task owners accountable.

• Coordinate the preparation and execution activities associated with internal and external audits, self certifications, and spot checks.
• Establish and maintain evidence standards that demonstrate compliance with CIP standards, performing quality reviews of evidence prepared by fellow analysts.
• Lead risk assessments, gap analyses, and remediation planning across stakeholder teams, and drive remediation efforts through to closure. Coordinate and execute potential violation and self-report workflows, including root cause analysis, impact scoping, mitigation documentation, and provide recommendations to the Senior Program Manager for Regional Entity submission.
• Conduct structured SME interviews to elicit evidence, assess control effectiveness, and support audit and self-certification readiness.
• Design and execute evidence-gathering strategies ensuring completeness and alignment with CIP evidentiary standards prior to regulatory submission or audit.

• Design and maintain compliance metrics; prepare and present program reporting for management and leadership review.
• Independently identify, escape, and drive resolution of compliance issues and associated mitigation activities.
• Own regular updates to leadership on program performance and emerging risks, including impact analysis of new and revised CIP standards.

• Serve as a trusted advisor to IT, Cybersecurity, OCC IT & Operators, physical security, and other teams, translating CIP requirements into practical, actionable guidance.
• Lead the coordination of responses to regulatory inquiries and requests.
• Champion compliance-related processes and tools, driving adoption and continuous improvement across stakeholder teams.
• Research emerging compliance program technologies and deliver recommendations to leadership for tools that improve monitoring, evidence management, and program scalability.

• Develop and deliver CIP compliance and security awareness training programs.
• Ensure employees and contractors understand NERC CIP obligations and responsibilities, tailoring guidance to role‑specific risk.