Director - NERC CIP Compliance #3916

Tallgrass; Denver (CO); On-site; USD 180,000 - 280,000; Full time

Job summary

Tallgrass seeks a Director, NERC CIP Compliance to lead the company’s NERC CIP program, govern standards, manage evidence, and coordinate across Cyber Security, IT, OT, Engineering, Operations, Legal, and Compliance.

This role serves as the SME for CIP requirements, ensuring audit-ready posture and continuous improvement through governance, testing, and remediation tracking.

Qualifications

• Bachelor’s degree in Electrical Engineering, Law, Information Security, Engineering, or related field.
• 10+ years leading or supporting NERC CIP compliance programs in power generation.
• Strong knowledge of NERC CIP standards, compliance lifecycle, and audits.
• Experience coordinating compliance activities across multiple functions.

Responsibilities

• Own and lead the end-to-end NERC CIP compliance program.
• Develop and maintain the compliance calendar and testing activities.
• Coordinate with Cyber Security, IT, OT, Engineering, Operations, Legal, and Compliance.
• Prepare for audits, spot checks, and evidence requests.
• Track remediation plans, exceptions, and corrective actions to closure.

Skills

NERC CIP knowledge

Regulatory compliance

Audit readiness

Cross-functional leadership

Education

Bachelor degree in Electrical Engineering, Law, Information Security, Engineering, or related field

Job description

Primary Purpose

The Director, NERC CIP Compliance is responsible for establishing and leading the company’s NERC CIP compliance program. This role owns program governance, standards interpretation, evidence management, internal controls testing, audit readiness, remediation tracking, and coordination with Cyber Security, IT, OT, Engineering, Operations, Legal, and Compliance teams. The position serves as the primary subject matter expert for NERC CIP requirements and ensures the organization maintains a defensible, repeatable, and audit-ready compliance posture.

Essential Duties & Responsibilities

NERC CIP Program Leadership

• Own and lead the end-to-end NERC CIP compliance program, including interpretation and application of applicable CIP standards and requirements.
• Develop, maintain, and execute the NERC CIP compliance calendar, ensuring all periodic requirements, reviews, testing, and evidence collection activities are completed on time.
• Serve as the primary point of contact for NERC CIP compliance matters across Cyber Security, IT, OT, Engineering, Operations, Legal, and Compliance teams.

Compliance Execution & Evidence Management

• Define, document, and maintain compliance processes, procedures, controls, and supporting documentation required to meet NERC CIP obligations.
• Establish and manage an evidence management framework that ensures artifacts are complete, accurate, traceable, and audit-defensible.
• Coordinate and perform internal compliance reviews and self-assessments to validate ongoing adherence to NERC CIP requirements.
• Track, manage, and report on compliance gaps, remediation plans, exceptions, and corrective actions through closure.
• Self Mandate for self mandation
  • Must must mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory mandatory

Audit Readiness & Regulatory Interface

• Prepare the organization for NERC CIP audits, spot checks, and data requests, including coordination of evidence collection and stakeholder responses.
• Act as the primary liaison with auditors, regulators, and company stakeholders for NERC CIP matters.
• Support audit walkthroughs, interviews, and evidence reviews, and manage follow-up actions resulting from audit findings.

Cross‑Functional Coordination

• Partner closely with OT engineering and operations teams to ensure controls are implemented in a manner that supports safe, reliable operations.
• Coordinate with Cyber Security Operations and Cyber GRC to align NERC CIP requirements with broader cyber security governance, policy, and risk management activities.
• Work with Legal and Compliance teams as needed to address regulatory interpretation, documentation, and response requirements.

Reporting & Continuous Improvement

• Develop and maintain metrics and reporting that provide leadership visibility into NERC CIP compliance status, risks, trends, and remediation progress.
• Identify opportunities to streamline compliance processes, improve evidence quality, and reduce audit risk through standardization and automation where appropriate.
• Stay current on changes to NERC CIP standards, guidance, and industry practices, and assess impacts to the organization.

Education

• Bachelor’s degree from an accredited institution in Electrical Engineering, Law, Information Security, Engineering, Information Systems, Computer Science, or a related discipline; or equivalent experience.

Experience/Specific Knowledge

• Minimum of 10 years of experience leading, managing, or supporting NERC CIP compliance programs in power generation environments.
• Strong working knowledge of NERC CIP standards, compliance lifecycle, and audit expectations.
• Experience coordinating compliance activities across