Coordinator-Compliance NERC/CIP & GAD

Tallgrass; Cheyenne (WY); On-site; USD 120,000 - 180,000; Full time

Job summary

Tallgrass seeks a dedicated Compliance Coordinator to lead NERC CIP and GADs compliance at the Cheyenne Energy Center. You will design, implement, and oversee programs covering BES assets, BC systems, governance, evidence management, and audit readiness across operations and OT networks.

The role partners with Operations, Maintenance, Engineering and Corporate Compliance to strengthen cyber and physical security, maintain regulatory mappings, and drive continuous improvement in reliability and

Qualifications

• 5+ years of direct NERC/CIP compliance experience in power generation, utility, or similar critical infrastructure.
• Knowledge of BES Cyber System classifications/impact ratings and applicable NERC CIP and O&P standards.
• Hands-on familiarity with OT/ICS environments (Emerson Ovation preferred) and OT network concepts.
• Experience with patching, configuration/change management, access controls, backup/recovery, and log retention in regulated environments.
• Strong technical writing, documentation, and audit-preparation skills.

Responsibilities

• Design, implement and oversee NERC CIP compliance programs across plant design, networks, and control systems.
• Lead CIP‑013 supply chain risk management and vendor cybersecurity controls.
• Coordinate with IT/OT for patch management, change control, vulnerability assessments and incident response.
• Maintain evidence repositories and ensure audit readiness across RSAWs, logs and change records.
• Prepare responses to data requests and ensure traceability between standards, procedures and evidence artifacts.

Skills

NERC CIP compliance

Audit readiness

Technical writing

Stakeholder communication

Project management

OT risk management

Education

Bachelor’s degree in Engineering, Cybersecurity, Information Systems, or related field

Tools

Emerson Ovation

Maximo CMMS

MS Office

Job description

Job Description

The (NERC/CIP & GADs) Compliance Coordinator is responsible for leading all NERC / CIP and GADs compliance activities at the Tallgrass Cheyenne Energy Center-an off-grid, large-scale AI-dedicated critical power, multi‑unit generation campus that is planned to produce approximately 2.5 GW of initial capacity with expansion capability up to 10 GW from a fleet of simple‑cycle gas turbines and combined‑cycle gas turbine (CCGT) technologies.

The (NERC/CIP & GADs) Compliance Coordinator is responsible for leading all NERC / CIP and GADs compliance activities at the Tallgrass Cheyenne Energy Center-an off-grid, large-scale AI-dedicated critical power, multi‑unit generation campus that is planned to produce approximately 2.5 GW of initial capacity with expansion capability up to 10 GW from a fleet of simple‑cycle gas turbines and combined‑cycle gas turbine (CCGT) technologies. The coordinator ensures full compliance with all applicable North American Electric Reliability Corporation (NERC) Reliability Standards—including Critical Infrastructure Protection (CIP) requirements, as well as all GADs data collection, validation, and submittals in accordance with NERC/IEEE requirements. This role leads the site’s NERC/CIP & GADs compliance programs, covering governance, procedures, evidence management, and audit readiness across Bulk Electric System (BES) assets and BES Cyber Systems (BCS). The Coordinator partners with Operations, Maintenance, Engineering, and Corporate Compliance to implement robust cyber and physical security controls for the Emerson Ovation DCS environment and associated OT networks, and drives continuous improvement in reliability, security, and regulatory performance.

Responsibilities

Essential duties and responsibilities

Design, Construction & Commissioning Phase

• Integrate NERC CIP requirements into plant design, network architecture, and control system configurations.
• Lead BES Cyber System identification, impact rating strategy, and boundary definition prior to commissioning.
• Review EPC, OEM, and integrator designs for CIP compliance, including ESP/PSP architecture.
• Oversee CIP‑013 supply chain risk management, including vendor cybersecurity controls and contract requirements.
• Support FAT/SAT activities to validate CIP controls before system acceptance.
• Establish initial compliance evidence, baselines, diagrams, access lists, and recovery plans.

NERC Compliance Program Management

• Serve as the site subject‑matter expert (SME) for applicable NERC Reliability Standards (CIP and O&P).
• Maintain and execute the site’s NERC Compliance Implementation Plan, including policy/procedure governance and evidence lifecycle management.
• Monitor regulatory updates (NERC/FERC/RRO) and implement changes, interpretations, and new standards within required timelines.
• Own BCS identification, impact rating, asset inventory, and boundary documentation; coordinate updates with Engineering and OT.
• Develop, maintain, and submit Reliability Standard Audit Worksheets (RSAWs), self‑certifications, and periodic data submittals.

CIP Cyber & Physical Security Oversight

• Manage compliance for CIP‑002 through CIP‑014 as applicable, with emphasis on CIP‑002 (BCS), CIP‑003 (security management controls), CIP‑004 (training & access), CIP‑005 (ESP), CIP‑006 (PSP), CIP‑007 (system security & patching), CIP‑008 (incident reporting), CIP‑009 (recovery), CIP‑010 (configuration change & vulnerability assessments), CIP‑011 (information protection), and CIP‑013 (supply chain risk).
• Oversee Electronic Security Perimeter (ESP) and Physical Security Perimeter (PSP) controls including access authorization, revocation, logging/monitoring, and periodic reviews.
• Coordinate CIP‑compliant account management, MFA where applicable, jump host usage, firewall rules, and remote access controls for Emerson Ovation DCS and supporting BCS.
• Coordinate with IT/OT on patch management (CIP‑007), baseline & change management (CIP‑010), vulnerability assessments, backups & recovery (CIP‑009), and log retention.
• Ensure secure handling and disposal of BES Cyber System Information (BCSI) per CIP‑011 and manage vendor/supply chain controls per CIP‑013.

Documentation, Evidence & Audit Readiness

• Develop and maintain complete, accurate, and verifiable compliance documentation, procedures, and records.
• Lead internal readiness reviews and coordinate external audits/spot checks; manage mitigation plans and corrective actions.
• Maintain evidence repositories (e.g., RSAWs, logs, access reviews, change records) with version control and retention compliance.
• Prepare responses to data requests; ensure traceability between standards, procedures, and evidence artifacts.

Training & Compliance Culture

• Administer and track NERC/CIP training and access authorizations for employees and contractors (CIP‑004).
• Deliver site briefings, tabletop exercises, and awareness campaigns on CIP responsibilities and cyber hygiene.
• Promote a proactive, audit‑ready culture across Operations, Maintenance, Engineering, and Corporate functions.

Operational & Technical Support

• Evaluate plant modifications (network/DCS/BCS/access systems) for NERC/CIP impacts and ensure compliant implementation.
• Support incident response and reporting (CIP‑008) and root cause analysis; coordinate lessons learned and mitigations.
• Partner with Maintenance on Maximo CMMS work processes to embed compliance controls into work planning, access, and change activities.
• Coordinate with corporate cybersecurity, IT, and engineering for risk assessments, penetration tests (if applicable), and remediation tracking.

Generating Availability Data System (GADS) Reporting

• Manage all GADs data collection, validation, and submittals in accordance with NERC/IEEE requirements.
• Ensure accuracy of event, performance, and outage data for GT and CCGT units.
• Coordinate with Operations, Maintenance, and Engineering to verify reliability event classifications.
• Maintain documentation, evidence, and audit readiness for GADs reporting.

Tools & Systems

• Distributed Control System (DCS): Emerson Ovation (operations, configuration management, backups, and security hardening).
• Enterprise Asset Management: Maximo CMMS (work management, change control tie‑ins, and evidence capture).
• Identity & Access Management: badge systems, directory services, MFA solutions, privileged access workflows.
• Network & Security: firewalls, switches, SIEM/logging, jump hosts, secure remote access, vulnerability scanning tools.
• Document & Evidence Repositories: version‑controlled storage for procedures, RSAWs, logs, and audit artifacts.

Qualifications

JOB REQUIREMENTS

Education

Minimum requirements

• Bachelor’s degree in Engineering, Cybersecurity, Information Systems, or related field; equivalent experience considered.

Experience/Specific Knowledge

• 5+ years of direct NERC/CIP compliance experience in power generation, utility, or similar critical infrastructure.
• Working knowledge of BES Cyber System classifications/impact ratings and applicable NERC CIP and O&P standards.
• Hands‑on familiarity with control system/OT environments (Emerson Ovation preferred) and OT network concepts.
• Experience with patching, configuration/change management, access controls, backup/recovery, and log retention in regulated environments.
• Strong technical writing, documentation, and audit‑preparation skills; ability to organize complete, accurate, and verifiable evidence.
• Intermediate proficiency level in MS Office applications that may include but are not limited to Outlook, Excel, Word, and PowerPoint.
• Certifications, Licenses & Registrations:
• Must possess and maintain a valid driver’s license and a driving record satisfactory to the company and its insurers (for travel).

Competencies, Skills & Abilities

• Regulatory Compliance & Audit Readiness
• Cybersecurity & OT Risk Management
• Technical Writing & Documentation Control
• Stakeholder Communication & Training Delivery
• Project Management & Prioritization
• Analytical Thinking & Attention to Detail
• Cross‑Functional Collaboration (IT/OT/Operations/Maintenance)

Physical Demands

• Sitting; standing; walking or moving throughout the facility; driving; talking; seeing (specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus); hearing; feeling; bending or stooping; squatting or crouching; reaching; kneeling; pushing; pulling; lifting to 25 lbs.
• Must be able to sit for prolonged periods of time.
<