IT Compliance Specialist

This position is responsible for initiating and tracking IT compliance related activities, including but not limited to SOC 1, ISSP, and NERC CIP. This position will perform various reconciliations and checks as part of established activities designed to achieve and maintain compliance. Additionally, this position will coordinate with other groups to collect, analyze, and report on activities designed and implemented to achieve compliance objectives.

This position must adhere to, administer, and maintain ISSP, SOC 1, and NERC CIP compliant IT practices and procedures.

• Initiate and track SOC 1 control activities
• Maintain SOC 1 control activity documentation
• Assist in gathering supporting documentation to support both internal and external SOC 1 testing activities
• Support the tracking of ISSP activities
• Maintaining ISSP documentation
• Initiate and track Generation Operations NERC CIP required control activities and tasks
• Perform various Generation Operations NERC CIP required reconciliations and checks
• Creating and maintaining Generation Operation NERC CIP documentation
• Assist in gathering supporting documentation to support both internal and external audits of Generation Operation NERC CIP audits
• Ability to travel
• Adheres to and is supportive of all ACES corporate policies and complies with all regulatory requirements including but not limited to NERC, FERC and relevant state regulations as applicable to the position
• Any additional responsibilities assigned by management

• Bachelor of Science in Computer Science, Technology or related degree
• 2 years of experience in a Technical or Compliance Role
• Understanding of SOC1, ISSP and NERC CIP standards
• General understanding of Information Security, Server Infrastructure, and Networks
• Understanding of physical and logical security controls
• Effective written and oral communication skills
• Strong organization skills and writing skills
• Strong attention to detail and exceptional customer service skills
• Ability to maintain confidentiality
• Works independently with minimal supervision