IT Portfolio Lead - OT Regulatory Compliance

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you're looking for.

Position Summary

The IT Portfolio Lead - OT Regulatory Compliance within Enterprise Security Services (ESS) is responsible for the governance, oversight, and execution of compliance programs supporting Operational Technology (OT) environments, with a focus on NERC CIP and TSA security directives. This role establishes and maintains a systematic approach to managing regulatory obligations, including internal controls, audit readiness, evidence management, and continuous compliance monitoring across Technology and Security Services supported systems and programs.

As part of ESS's governance and oversight function, this position provides consultation to business units, application owners, and technology teams to ensure alignment with regulatory requirements and enterprise compliance objectives. The role assists in the completion of compliance assessments, control design and effectiveness reviews, and risk evaluations, delivering actionable insights to reduce regulatory risk and improve the maturity of the OT control environment.

The IT Portfolio Lead - OT Regulatory Compliance partners closely with ESS stakeholders and cross-functional teams-including Technology Services, Transmission, and Generation-to ensure consistent implementation of compliance requirements and clear ownership of responsibilities across NERC CIP standards and related regulatory domains. The role drives accountability through the development and reporting of meaningful compliance metrics, dashboards, and insights that support leadership visibility into control performance, audit readiness, and remediation progress.

This position is accountable for establishing, maintaining, and continuously improving ESS policies, procedures, tools (including governance, risk, and compliance platforms), and standardized processes that enable efficient execution of compliance activities. Leveraging industry best practices and regulatory guidance, the role ensures adherence to evolving NERC and TSA requirements and supports ESS and business areas in responding effectively to audits, inspections, and regulatory inquiries.

Essential Responsibilities

* Operations Management:
Provide strategic oversight and planning for ESS OT regulatory compliance programs, ensuring alignment with NERC CIP, TSA, and enterprise objectives. Lead compliance program execution across internal controls, assessments, standards implementation, and audit readiness activities. Utilize data analytics, control performance results, and audit insights to identify compliance risks and recommend mitigation strategies. Ensure the quality, integrity, and accuracy of compliance data, evidence, and reporting used for regulatory and leadership visibility.

* Process Management:
Operate and continuously improve ESS compliance processes that support internal controls, evidence management, and regulatory reporting across OT environments. Drive strong audit and compliance outcomes by standardizing processes, reducing manual effort, and enhancing effectiveness of tools (e.g., GRC platforms such as Archer). Ensure processes are aligned to regulatory requirements and designed for sustainability, traceability, and defensibility during audits. Lead initiatives to improve usability of compliance tools, reporting, and workflows while incorporating industry best practices and lessons learned from audits and regulatory guidance.

* Training / Communications:
Develop and deliver targeted training, guidance, and communications to application owners, control owners, and business stakeholders to ensure clear understanding of compliance responsibilities, regulatory requirements, and ESS processes. Support awareness and adoption of policies, procedures, and tools related to NERC CIP and TSA. Contribute to the development and tracking of compliance metrics and key performance indicators (KPIs) to measure process effectiveness, audit readiness, and overall program maturity.

* Relationship Management:
Serve as a primary point of contact within ESS for compliance-related processes, fostering strong partnerships with Technology Services, Transmission, Generation, and other business areas. Act as a liaison between ESS and internal/external stakeholders, including auditors and regulators, to support audits, data requests, and compliance inquiries. Leverage stakeholder feedback and operational insights to continuously improve the effectiveness, efficiency, and user experience of compliance processes, tools, and governance practices.

Minimum Requirements

* Seven years of related functional experience

* Bachelor's degree in technology, Science, Business or related field, or 4 years of experience equivalent to the position.

* Excellent communication…