Critical Infrastructure Protection; CIP Analyst

Critical Infrastructure Protection (CIP) Analyst

The basic function of the CIP analyst is to support the NERC compliance programs (including policies, procedures, and documentation) by conducting detailed reviews and analysis of CIP compliance evidence, reporting findings, and maintaining program documents for Certrec Corporation clients. The CIP Analyst reports to their supervisor/manager for day‑to‑day tasks and to a Project Manager when working on a large project.

• Ensuring that all products are complete and of a high quality.
• Ensuring that projects are delivered on time, within scope, and within budget.
• Maintaining relationships with clients and seeking contract opportunities for the company.

• Deliver high‑quality CIP compliance services aligned with Certrec standards, regulatory requirements, and client expectations.
• Serve as a CIP subject‑matter resource in client interactions, project meetings, and compliance engagements, supporting strong client relationships and identifying potential service opportunities.
• Manage assigned CIP compliance activities, including audits, self‑assessments, gap analyses, Internal Compliance Programs (ICPs), and compliance investigations, and provide recommendations based on regulatory changes or identified risks.
• Develop, review, and maintain CIP compliance artifacts, including client procedures, training materials, BES Asset Matrices, network diagrams, and supporting evidence.
• Evaluate and document client physical security programs, including access controls, detection measures, and mitigation strategies.
• Perform peer reviews of CIP work products and proactively identify and elevate risks that may impact project quality, schedule, or scope.
• Ensure project scope is appropriately managed and that any changes receive proper client approval and internal alignment.
• Report project status to clients in coordination with the Project Manager and identify opportunities to improve or streamline compliance processes.
• Support and mentor lower‑level CIP analysts and collaborate across departments to meet business needs.
• Create and maintain training materials and deliver instruction on Certrec platforms and tools.
• Gather, review, and organize client evidence for CIP procedures, self‑assessments, data submittals, RSAWs, and related compliance activities.
• Maintain accurate time reporting and meet billable utilization expectations.
• Stay current on Certrec products and applicable NERC and Regional Entity CIP Reliability Standards and apply this knowledge to client work.
• Comply with all company policies and procedures.

• Communication
  
  Skills:
  
  Ability to clearly communicate verbally and in writing in English.
• Multi‑tasking: Ability to simultaneously perform multiple assignments.
• Interpersonal
  
  Skills:
  
  Ability to interface effectively with different levels of the organization both internally and with clients.
• Computers & Software: Basic working knowledge and ability using Microsoft Excel, Outlook, and Word.
• Knowledge: Basic knowledge level in Compliance Services, especially in the Utility industries.

• Required: Associate degree or 60 college credit hours or higher.
• Preferred: Bachelor’s degree in Electrical Engineering or Computer Engineering.

• Required: 1–3 years of experience in an equivalent firm or electric utility experience in an engineering, technical, regulatory, or operational role; or a minimum of 3 years in information technology.

• Preferred: Certified Information Systems Security Professional (CISSP).

• Ability to remain in a stationary position for long periods while working at a computer.
• Ability to operate a computer and other standard office equipment.
• Ability to occasionally move about the office as needed.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

• Education: Bachelor’s of Electrical Engineering (required).
• Experience: 1–3 years in an equivalent firm or electric utility engineering/technical/regulatory/operational role; or a minimum of 3 years in information technology (required).

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.