Security and Compliance Consultant; OT Regulatory Compliance

Xcel Energy (NASDAQ: XEL) is a leading energy provider and Fortune 500 company, dedicated to serving millions of electricity and natural gas customers across eight states:
Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient, and sustainable energy.

Xcel Energy is a place where you’ll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you’ll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best.

Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday–Thursday); however, work location expectations vary based on role, team, and business needs.

Position Summary The Security and Compliance Consultant within Enterprise Security Services (ESS) is responsible for the governance, execution, and continuous improvement of OT regulatory compliance programs aligned with NERC CIP and TSA security directives, ensuring effective management of regulatory obligations through internal controls, compliance assessments, evidence management, audit readiness, and continuous monitoring. This role provides expert guidance to business units, application owners, and technology teams to drive alignment with regulatory requirements, strengthen control effectiveness, and reduce compliance risk while establishing clear ownership, standardized processes, and meaningful metrics that deliver leadership visibility into control performance, audit readiness, and remediation progress.

Additionally, the position maintains and enhances ESS policies, procedures, tools (e.g., Archer eGRC platform), and processes to enable sustainable, defensible compliance practices and support effective responses to audits, inspections, and regulatory inquiries.

Essential Responsibilities Operations Management:
Lead and execute OT compliance programs across NERC CIP and TSA requirements, including internal controls, assessments, and audit readiness. Identify and mitigate compliance risks through data analysis, control performance, and audit insights while ensuring accuracy and integrity of compliance evidence and reporting.

Process Management:
Design, operate, and continuously improve standardized compliance processes and tools (e.g., Archer) supporting evidence management, control execution, and regulatory reporting. Ensure processes are sustainable, traceable, and audit-defensible while driving efficiency and incorporating regulatory guidance and lessons learned.

Training / Communications:
Deliver targeted training and guidance to stakeholders to ensure clear understanding of compliance responsibilities, regulatory requirements, and ESS processes. Develop and track metrics and KPIs to measure control effectiveness, audit readiness, and overall program maturity.

Relationship Management:
Serve as a primary compliance liaison across ESS, Technology Services, Transmission, and Generation, and coordinate with auditors and regulators. Drive accountability, clarify ownership, and incorporate stakeholder feedback to enhance compliance processes, tools, and governance practices.

Minimum requirements:

Bachelor's degree in technology, Science, Business or related field, or 4 years of experience equivalent to the position.

Seven years of related functional experience.

At least 2…