NERC CIP Compliance Analyst; Utilities

at VELCO in Rutland, Vermont, United States

VELCO is seeking a detail-oriented and analytical Compliance Analyst to support our NERC Compliance Program and help protect the reliability and security of Vermont's electric transmission system.

In this role, you will work across the organization to ensure compliance with North American Electric Reliability Corporation (NERC) Reliability Standards, strengthen internal controls, support regulatory audits, and drive continuous improvement initiatives that reduce risk and support grid reliability.

The Compliance Analyst is part of a team responsible for supporting the NERC Compliance Program that ensures the effective and efficient reduction of risks to the reliability and security of the grid and every Vermonter. This role ensures adherence to the Transmission NERC Reliability Standards and internal controls that VELCO has developed and continues to develop. The Compliance Analyst also coordinates program and procedure development;

performs daily, quarterly, and yearly tasks to evaluate compliance; as well as other tasks as deemed appropriate.

• Functions as an internal expert for NERC Reliability Standards, controls, and best practices for both Operations and Planning (O&P) and Critical Infrastructure Protection (CIP) standards.
• Ensures the NERC Compliance Program strategy, program documentation, procedures, and evidence are aligned and consistent.
• Develops, implements, and maintains internal controls to ensure regulatory adherence.
• Reviews standards in development, coordinates with departments ensuring appropriate processes are in place to track/monitor for implementation, and facilitate Subject Matter Expert(s) in the development of new or updated of program documentation.
• Collaborates with Subject Matter Expert(s) in developing department process maps associated with NERC reliability standards.
• Participates in and leads internal incident investigations with other Compliance team members (Learning Opportunities) to identify areas of improvement and potential area(s) of noncompliance with a focus on NERC compliance.
• Develops and tracks mitigations plans including subtasks and timelines to completion.
• Participates in internal assessments (and leads when designated by Manager, NERC Compliance), to identify, document and implement process improvements focused on ensuring programmatic improvements and regulatory compliance, including identifying risks/weaknesses and proposing actions to eliminate and/or mitigate the impacts of potential risks.
• Develops and delivers training for employees on applicable compliance obligations and their roles and responsibilities.
• Participates in periodic audits performed by NPCC to assess VELCO's compliance with NERC reliability standards.
• Leads responses to regulatory self-certifications, quarterly MIDAS submittals, and audit or self-reports/self-log RFIs including assembly and responses with Subject Matter Expert(s).
• Serves as the Compliance staff liaison with NPCC regulators on self-logs and self-reports.
• Serves as the Compliance staff liaison between other departments (Information Security, Planning Department, Engineering, HR Department, and Physical Security).
• Collaborates with other employees in maintaining the GRC tool to track/monitor compliance with the NERC Reliability Standards.
• Develop GRC evidence schedules and surveys to support mitigation activities.
• Identify gaps in processes, controls, or documentation and recommend improvements to strengthen compliance and reduce risk.
• Participate in NERC, North American Transmission Forum (NATF), and other workshops deemed acceptable and necessary to build credibility and knowledge.
• Performs other duties as assigned.

A Bachelor’s degree in Engineering, Information Technology, the sciences, law, mathematics or related discipline, or equivalent work experience.

A minimum of three years of professional experience in a Compliance function, or in a technical role in an area such as Operations or Planning, with significant responsibility for meeting compliance standards.

• A firm understanding of energy utility operations and industry compliance programs, knowledge of State and Federal regulations, NERC reliability and critical infrastructure protection standards, NPCC regional standards and compliance obligations, FERC guidelines.
• Demonstrated ability to perform audits and to…