CIP Analyst

Location

Winchester, KY

This role supports compliance with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards by managing and maintaining the CIP compliance program. The position serves as a subject matter expert, providing regulatory guidance, monitoring standards changes, coordinating audits and regulatory engagements, and ensuring the timely completion of compliance activities. The role requires strong regulatory expertise, analytical skills, and close collaboration with internal stakeholders and external regulators to reduce risk to the Bulk Electric System.

• Develop and maintain the CIP compliance program, including policies, plans, procedures, and internal controls
• Oversee document reviews, communicate regulatory changes, and test internal control effectiveness
• Serve as a subject matter expert on NERC CIP requirements for management and internal stakeholders
• Provide interpretation, technical guidance, and compliance support to subject matter experts
• Support CIP administrative requirements, including training development and delivery
• Initiate and process physical, electronic, and BCSI access requests
• Plan, coordinate, and document drills and supply chain risk assessments
• Monitor standards under development and assess organizational impact
• Communicate regulatory changes and support implementation planning
• Track compliance deadlines and ensure timely completion by assigned stakeholders
• Serve as a primary compliance contact for CIP-related regulatory matters
• Support self-reports, mitigation plans, RFIs, audits, spot checks, and self-certifications
• Assist with the administration of compliance workflow and documentation systems
• Perform periodic baseline, access, and privilege reviews
• Monitor and maintain visitor access logs
• Perform additional duties as assigned

• Bachelor’s degree in a related technical field, or an equivalent combination of education and experience
• Seven (7) years of related experience
• Demonstrated experience in regulatory compliance or auditing

• Certified Information Systems Auditor (CISA) preferred
• Strong knowledge of CIP policies, procedures, and regulatory requirements
• General understanding of computing and network architecture
• Experience with compliance management and workflow systems
• Proficiency with Microsoft Office applications
• Strong written, verbal, and interpersonal communication skills
• Ability to work effectively with internal teams and external stakeholders
• Strong organizational, documentation, and time-management skills
• Ability to balance attention to detail with big-picture understanding
• Ability to work independently and collaboratively
• Ability to exercise discretion and maintain confidentiality