Details
Posted: 07-Apr-22
Location: Fort Collins, Colorado
Type: Full Time
Preferred Education: 4 Year Degree
Years of Experience:
2 - 4
Salary Details:
Bi-weekly salary range for this position: $3,494 - $4,805 (placement DOQ)
(range if annualized: $90,852 - $124,920)
Platte River Power Authority is a public power provider that has emerged as a leader in Colorado’s utility sector. Our staff works collaboratively and efficiently to safely deliver reliable, environmentally responsible and financially sustainable energy and services to our owner communities of Estes Park, Fort Collins, Longmont and Loveland.
We share a sense of purpose and great pride in what we do and the value we provide to our communities, our region and the energy industry. If you’re searching for a collaborative working environment within a mid-sized organization that values innovative ideas, diverse perspectives and provides opportunities to make a difference, consider joining the Platte River team.
Technical Compliance Analyst - CIP
The Technical Compliance Analyst - CIP is responsible for providing oversight, implementation guidance, document maintenance, and tactical direction to Platte River’s business units complying with North American Electric Reliability Corporation (NERC) CIP requirements. This individual participates in enterprise-wide CIP documentation drafting, conducts internal audits and spot checks, conducts CIP status meetings, leads CIP implementation project teams, participates in standards drafting, oversees compliance task completion and evidence creation to ensure successful CIP compliance implementation is met across all applicable business units. The position will reside within SCADA Services, but provide CIP support to the entire organization.
An ideal candidate for this role is well versed in technical writing such and documentation; and enjoys collaborative work and problem-solving, as this position will serve as the initial point of contact for staff who need to implement CIP controls. Experience in areas of HIPAA, PCI, and cybersecurity compliance as well as internal audits is also highly preferred.
Essential duties and responsibilities
Must possess required knowledge, skills, abilities and experience and be able to perform, with or without reasonable accommodations, the essential functions of the job.
- Responsible for coordinating all efforts associates with preparation of regulatory documents for submissions. Provides compliance technical oversight to CIP activities companywide.
- Serves as subject matter expert and guides staff with the implementation of CIP processes, procedures, and evidence creation.
- Maintains and participates in drafting CIP standard operating procedures, policies, workplan instructions, and document forms.
- Monitors and tracks all NERC CIP compliance activities using compliance management software.
- Interpret regulatory rules or rule changes and ensure that changes are communicated through company policies and procedures.
- Supports all phases of NERC CIP reliability audit activities, which includes responses to self-certifications, spot checks, and annual audit activities.
- Responsible for preparation and drafting of additional information, documents, or responses requested by NERC, WECC, or other agencies.
- Collects responses from NERC and provides input on process improvements.
- Perform investigative actions utilizing security and network management applications to manage information protection security controls.
- Conducts internal audits, spot checks, and risk analysis to mitigate potential non-compliance issues.
- Creates, updates, and provides training to staff to ensure they are trained on compliance related topics, policies, or procedures.
- Coordinates and leads CIP compliance status meetings to communicate compliance requirements.
- Works safely and demonstrates safe work practices.
Other functions
- Attends conferences and workshops associated with CIP requirements to proactively engage in training to maintain current knowledge of existing and emerging regulations and standards.
- Maintains relationships with NERC, WECC and other compliance and utility industry personnel.
- Performs other duties as assigned.
This position has no supervisory or lead role responsibilities.
Knowledge, skills and abilities
The following are required:
- Demonstrated ability to analyze, draw conclusions and devise solutions to complex problems.
- Strong computer and networking skills.
- Knowledge of bulk electric system concepts.
- Knowledge of power system operations concepts.
- Thorough understanding of NERC CIP regulation standards.
- Thorough understanding of cyber security concepts.
- Ability to interpreted CIP requirements and create required processes, plans or procedures.
- Effective written and verbal communication and evidence documentation skills.
- Ability to work with people having varying technical skill levels.
- Ability to manage projects and time effectively to meet strict regulatory deadliness.
- Ability to follow processes and procedures.
The following are preferred:
- Knowledge of generally accepted government accounting standards.
Qualifications
Education
- Bachelor’s degree in Computer Science, Information Systems/Technology, Engineering, Cyber Security, or equivalent.
Required work experience
- 3 years experience configuring, maintaining, and troubleshooting SCADA/EMS, digital control systems (DCS), networks or server infrastructure.
- 3 years’ experience designing, configuring, and maintaining cyber security controls.
- 3 years experience implementing NERC CIP standards including documenting processes, participating in audits as an SME and leading compliance initiatives.
Preferred work experience
- 5 years experience configuring, maintaining, and troubleshooting SCADA/EMS, digital control systems (DCS), networks or server infrastructure
- 5 years experience designing, configuring and maintaining cyber security controls
- 5 years experience implementing NERC CIP standards including documenting processes, participating in audits as an SME and leading compliance initiatives
Licenses/certifications
- Cyber security related certifications
- Current valid driver’s license and ability to remain insurable under Platte River’s vehicle liability policy
Bi-weekly salary range for this position: $3,494 - $4,805 (placement DOQ)
(range if annualized: $90,852 - $124,920)
Platte River Power Authority offers employees an outstanding benefits package. Benefits offered for this position may include the following: health insurance options including PPO and high deductible with health savings account; telemedicine; benefit advocacy; dental and vision insurance; FSA; basic as well as voluntary life insurance and accidental death and disability; long-term disability insurance; paid holidays; paid time off; wellness program; in-house training opportunities; tuition reimbursement; and employee assistance program.
For additional information, please see our website careers page at: https://www.prpa.org/careers/benefits/