Compliance Analyst - Senior Compliance Analyst
Duke Energy
Turn this role into an interview — a resume and cover letter built around what this employer wants.
Benefits offered by this job
Job summary
Duke Energy is seeking a mid-level Compliance Analyst to support regulatory requirements, data gathering, and reporting, balancing internal standards (IT502, IT503) with external rules. The role emphasizes growing independence and SME capabilities in a large utility environment.
The Sr Compliance Analyst level handles more complex problems across multiple areas, applying procedures, guiding business units on self‐reports and remediation plans, and participating in risk assessments to strengthen
Qualifications
- Bachelor's degree in one of the listed fields.
- 2 years related work experience.
- In lieu of degrees, 6 years related work experience.
Responsibilities
- Carries out individual work assignments in development and support of processes, programs, and projects of the Compliance program.
- Gather and review data for responses to legal and regulatory inquiries.
- Demonstrates working knowledge of regulatory standards, policies, processes, and controls applicable to the business area.
- Perform or assist in business area trending analysis and reporting.
- Guide and support business units in the development of self-reports, cause analyses, corrective plans, and mitigation plan porting.
- Competent in the use of compliance tracking tools, procedures, and research capabilities for the Compliance program.
- Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
- Assess or assist in the assessment in the effectiveness of internal compliance controls.
- Maintain or create evidence of mitigation and corrective actions and required business area reporting.
- Correlate event data to identify trends and compliance risks.
- Make recommendations that enable expeditious remediation to events and prevents recurrence.
Education
Job description
More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.
Compliance Analyst This is the second level of the Compliance Analyst classification hierarchy. Employees at this level solve problems, in single areas of specialization, with general supervision. Incumbents are expected to develop skills, and the ability to work with greater independence, as well as strive to become subject matter experts. They have knowledge of fundamental concepts and understand how to develop and apply procedures while balancing Duke Energy’s internal (e.g., IT502, IT503) and external regulatory compliance requirements (e.g., FERC, NERC, NIST, Sarbanes Oxley) and the needs of the business.
This is the third level of the Compliance Analyst classification hierarchy. Employees at this level solve more complex problems, in multiple areas of specialization, with general supervision. Incumbents are expected to develop advanced skills and the ability to work with greater independence. They effectively apply fundamental concepts and procedures to work that is fairly complex and varied. They have knowledge of fundamental concepts and understand how to develop and apply procedures while balancing Duke Energy’s internal (e.g., IT502, IT503) and external regulatory compliance requirements (e.g., FERC, NERC, NIST, Sarbanes Oxley) and the needs of the business.
- Carries out individual work assignments in development and support of processes, programs, and projects of the Compliance program.
- Gather and review data for responses to legal and regulatory inquiries.
- Demonstrates working knowledge of external and internal regulatory standards, policies, processes, and controls that are appliable to the business area.
- Perform or assist in business area trending analysis and reporting.
- Guide and support business units in the development of self-reports, cause analyses, corrective plans, and mitigation plan porting.
- Competent in the use of compliance tracking tools, procedures, and research capabilities for the Compliance program.
- Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
- Assess or assist in the assessment in the effectiveness of internal compliance controls.
- Maintain or create evidence of mitigation and corrective actions and required business area reporting.
- Correlate event data to identify trends and compliance risks.
- Make recommendations that enable expeditious remediation to events and prevents recurrence.
- Carries out individual work assignments of a more complex nature for project related to implementing changes to support new or revised standards.
- Receives work assignments and works independently with some review and direction by management or senior compliance analyst.
- Performs or assists in the performance of technical project work as needed to complete project deliverables.
- Works directly with internal project leads to ensure project goals are met and/or issues are escalated, classified, and documented properly.
- Working knowledge of Compliance policies, standards, processes, and controls.
- Able to apply process and controls knowledge to meet compliance requirements.
- Provides input on process improvements to Compliance program.
- Executes Compliance functional processes and procedures with minimal oversight.
- Monitor and evaluate the effectiveness of program controls to ensure they provide the intended level of protections.
- Communicate with customers to understand compliance / regulatory requirements.
- Communicate compliance information in a clear and concise manner.
- Communicate problems and resolutions to manager and/or customers.
- Provides good customer support to deliver compliance results to internal parties.
- Bachelors degree in Computer Science or Bachelors degree in Economics or Bachelors degree in Engineering or Bachelors degree in Business or Bachelors degree in Accounting or Bachelors degree in Cybersecurity or Bachelors degree in Other Related Degree or Bachelors degree in Computer Information Systems or Bachelors degree in Finance
- 2 years related work experience
- In lieu of Bachelors degree(s) AND 2 year(s) related work experience listed above, High School/GED AND 6 year(s) related work experience
- Bachelors degree in Computer Science or Bachelors degree in Economics or Bachelors degree in Engineering or Bachelors degree in Business or Bachelors degree in Accounting or Bachelors degree in Cybersecurity or Bachelors degree in Other Related Degree or Bachelors degree in Computer Information Systems or Bachelors degree in Finance
- 4 years related work experience
- In lieu of Bachelors degree(s) AND 4 year(s) related work experience listed above, High School/GED AND 8 year(s) related work experience
Bachelors degree
- Experience with audit skills, controls, security, and related industry regulatory issues
- Demonstrates excellent listening and communication skills and puts forth the effort to understand other points of view
- Has the ability to manage confidential information with a high degree of integrity
- Responds well to supervisors, is easy to challenge and develop, and is easily coachable
- Able to work effectively with minimally defined direction requiring some degree of judgment
- Able to present complex information in an understandable manner both verbal and written
- Demonstrated ability to absorb change and continue with positive results
- Exhibits confidence and a proper level of assertiveness when needed; displays maturity in approach and ability to effectively handle stress and frustration
- Recognize a possible compliance violation and take appropriate action to report the incident as required
- Knowledge in validating the organization against policies/guidelines/procedures/regulations/laws to ensure compliance
- Skill in supporting audits or reviews of technical systems.
- Skill in performing impact/risk assessments.
- Skill in processing collected data for follow-on analysis.
- Previous experience in regulatory compliance, risk management, audit, accounting/finance, or other relevant positions
- Understanding of utility industry operations PE, PMP, CISA (Cybersecurity and Infrastructure Security Agency), CISSP (Certified Information System Security Professional), NERC System Operator, CPA, CIA (Certified Internal Auditor), CPSM (Certified Professional Supply Management)
Onsite Mobility Classification – Work will be performed at a company facility. On-site employees are also required to live within a reasonable daily commute to their assigned work location, not greater than 50 miles one way.
If NERC CIP access is required, a Personal Risk Assessment will need to be completed every 7 years and annual cybersecurity training must be successfully completed as well.
5-15%
Yes
No
No
This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.
Diversity & Inclusion Read about our commitment to supporting a diverse and inclusive workforce. About Duke Energy Terms of Use Brighter opportunities. Brighter futures. Duke Energy values ideas that come from a diverse and inclusive workforce, and we’re dedicated to providing a work environment where all people are valued, respected and able to reach their full potential. Duke Energy is an equal opportunity employer and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, childbirth or related medical conditions, including but not limited to lactation, religion, national origin, ancestry, ethnicity, citizenship, sexual orientation, gender identity, gender expression, age, marital status, physical or mental disability, genetic information, medical condition, military status, or protected veteran status. Duke Energy complies with all applicable state, federal and local laws, regulations and ordinances prohibiting discrimination.
California Consumer Privacy Statement Duke Energy Notice to Employees: Government Contractor Whistleblower Protections Do Not Sell or Share My Personal Information (CA) Terms of Use Accessibility
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
