Operations Analyst

Overview

Job Title

Assignment Responsibilities:

Note:

All official drafts, documents and recommendations, as listed below, must be reviewed, finalized and approved / accepted by appropriate BPA manager or other federal personnel with the authority to do so.

Develop an in-depth understanding of Transmission Technology Operational Services (JO) organization's General Support System (GSS) structure and functional teams:
Coordinate the JO General Support System structure and functional teams and facilitate developing program strategies to link with the Federal Information Security Management Act (FISMA) based accreditation GSS structure.

Provide project management support for compliance mitigation plans and asset strategy initiatives:
Track mitigation dates and deliverables. Follow-up with assigned resources to verify action items for mitigation plans are completed on time. Facilitate meetings to answer questions related to compliance and asset strategy plans and initiatives. Create reports and timelines detailing current status of mitigation plan activities. Provide analytics (via Excel, Access, SharePoint, etc.) and data parsing to help expedite data call reporting.

Perform quarterly review of users with authorized cyber access to systems and unescorted physical access to Critical Cyber Assets (CCA) or Access and Control Monitoring (ACM) cyber assets; following pre-set guidelines and within established time constraints, verify accesses have been properly authorized per North American Reliability Cooperation (NERC) standards.

Recommend; and, facilitate and coordinate approved project initiatives and process improvement efforts, specifically those addressing Process Support and Management team processes. Verify adherence to compliance processes is conducted by team on a day-to-day basis and develop work processes to improve compliance posture of BPA:
Review current processes against BPA policy and procedures to verify alignment, report to BPA management where any differences are found. Evaluate current processes and policies that compliance standards for efficiency and accuracy to the standard. Recommend any changes to BPA management, assisting with implementation of approved recommendations. Develop management reporting tools that document and communicate the progress of standards-related activities to verify timely completion.

Participate in incident reviews and Rapid Response Team (RRT) meetings, assisting the implementing manager by providing information, evidence and artifacts that apply to compliance incidents.

Reliability Compliance:
Providing monitoring, review, analysis and other compliance support activities for the reliability program by validating information is reliable, consistent, and useful. Analysis includes potential impacts to Transmission programs and processes. Provide recommendations to management and BPA Subject Matter Experts (SMEs) to mitigate, comment on, or provide further review for NERC and Western Electricity Coordinating Council (WECC) proposed rule making and policies.

Utilize TT's library publishing process to verify documentation is up-to-date and of adequate quality; perform data tracking. Make recommendations for changing/enhancing organization and information navigation in TT's library structure.

Draft and recommend processes and procedures to support NERC Mandatory Reliability standards and Department of Energy (DOE) National Institute of Standard and Technology (NIST) and FISMA security requirements for review and approval by BPA management. This work may include:
Assist in development of training materials and job aids to support above. Support the development of documentation necessary for reporting and audit requirements. Provide quality assurance support to verify that vetted and established compliance standards and guidelines are followed, alert BPA manager of any noted concerns or potential issues. Provide support to NERC annual certification process and any other spot audit or compliance requests by assisting with data collection and review of compliance artifacts with Control Center (CC) SMEs, validating comments and evidence are sufficient…