Compliance and Operations Analyst

CTC; Dallas (TX); Hybrid; USD 90,000 - 130,000; Full time

Job summary

CTC is seeking a Compliance and Operations Analyst to support the daily operation, security, and compliance of the Transmission Management System environment. You will develop, maintain, and improve NERC CIP policies, plans, procedures, and supporting documentation while coordinating across technical and business teams.

You will work with Operations, Security, Engineering, and Compliance stakeholders to identify risks, implement controls, and drive improvements that enhance reliability,

Qualifications

• Bachelor's degree or equivalent in IT, Cybersecurity, Engineering, or related field.
• 5+ years in regulated OT, transmission operations, cybersecurity, or compliance.
• Knowledge of NERC CIP standards and application in electric utilities.
• Experience creating and maintaining compliance documentation and policies.
• Understanding of TMS/EMS/OT environments and related controls.
• Familiarity with vulnerability, patch, access, and configuration management.
• Strong analytical, communication, and cross-functional collaboration skills.

Responsibilities

• Support daily operations within the TMS environment and ensure secure, compliant changes.
• Develop and maintain NERC CIP policies, plans, and procedures with documentation.
• Monitor compliance with NERC CIP, regulatory, and cybersecurity requirements.
• Analyze processes to drive efficiency, standardization, and risk reduction.
• Collaborate with Operations, Security, Engineering, and Compliance stakeholders.
• Support audits, evidence management, and audit response activities.
• Coordinate change management activities with responsible teams.

Skills

NERC CIP standards

Policy development

OT security

Risk assessment

Change management

Audits & evidence

Cross-functional collaboration

Documentation accuracy

Education

Bachelor's degree in IT/Cybersecurity/Engineering

Equivalent experience considered

Tools

Policy management tools

Documentation repositories

Job description

Primary Functions:

The Compliance and Operations Analyst supports the daily operation, security, and compliance of the organization's Transmission Management System (TMS) environment, ensuring adherence to applicable NERC Critical Infrastructure Protection (CIP) standards and internal security protocols. This role is responsible for developing, maintaining, and improving NERC CIP policies, plans, procedures, and supporting documentation, as well as coordinating compliance activities across technical and business teams.

The analyst works closely with Operations, Security, Engineering, and Compliance stakeholders to identify risks, implement controls, and drive operational and process improvements that enhance system reliability, security, and regulatory compliance. The position plays a key role in facilitating change management activities by ensuring that operational changes are evaluated, implemented, and documented in a secure and compliant manner while supporting continuous improvement initiatives across the TMS environment.

Responsibilities:

• Support daily operational activities within the TMS environment.
• Maintain and enhance NERC CIP compliance documentation, including policies, plans, procedures, and evidence repositories.
• Monitor and support compliance with applicable NERC CIP, regulatory, and cybersecurity requirements.
• Analyze operational and compliance processes and drive continuous improvement initiatives that enhance efficiency, standardization, risk reduction, and regulatory readiness.
• Partner with Operations, Cybersecurity, and business stakeholders to plan, review, and implement changes in a secure, reliable, and compliant manner.
• Support vulnerability management, patch management, and baseline configuration monitoring activities.
• Communicate effectively as a liaison between technical teams, program management, project sponsors, and business stakeholders.
• Ensure cybersecurity and compliance controls remain effective and aligned with regulatory and organizational requirements.
• Assist with internal and external audits, including compliance evidence management and audit support activities.

Key Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Computer Science, Business, or a related field; equivalent experience may be considered.
• 5+ years of experience supporting regulated operational technology (OT), transmission operations, cybersecurity, compliance, or related utility environments.
• Knowledge of NERC Critical Infrastructure Protection (CIP) standards and their application within electric utility environments.
• Experience developing, maintaining, and managing policies, plans, procedures, standards, and compliance documentation.
• Understanding of Transmission Management Systems (TMS), Energy Management Systems (EMS), Operational Technology (OT), or other critical infrastructure environments.
• Familiarity with cybersecurity principles, including vulnerability management, patch management, access management, and configuration management.
• Strong analytical and problem-solving skills with the ability to identify risks, compliance gaps, and process improvement opportunities.
• Demonstrated ability to manage multiple priorities and deliver results in a fast-paced, highly regulated environment.
• Experience coordinating activities across technical teams, compliance personnel, business stakeholders, and leadership.
• Excellent written and verbal communication skills, including the ability to translate complex technical concepts into business-focused communications.
• Knowledge of change management processes and the ability to support secure and compliant implementation of operational changes.
• Strong organizational skills with attention to detail and accuracy in documentation and recordkeeping.
• Ability to work independently while effectively collaborating within cross-functional teams.

Measurements:

• Maintains a high level of client satisfaction and builds positive effective relationships with clients and related stakeholders
• Effective actions taken to minimize risk
• A track record of collaborative participation in the management of technology platforms
• Compliance with applicable NERC CIP, FAA, FCC, etc. regulations
• Effective documentation and communication of project milestones, risks, issues, deliverables, escalations, etc.