IT Compliance Specialist

ACES; Carmel (IN); On-site; USD 65,000 - 85,000; Full time

Job summary

ACES is seeking an IT Compliance Specialist to initiate and track SOC 1, ISSP, and NERC CIP compliance activities across generation operations. You will coordinate with multiple groups to collect, analyze, and report on compliance activities, maintaining documentation and supporting external audits.

The role requires a BS in a related field, 2 years in a technical/compliance role, and strong written communication. Travel may be required; adherence to regulatory requirements is essential.

Qualifications

• Bachelor of Science in Computer Science, Technology or related degree.
• 2 years of experience in a Technical or Compliance Role.
• Understanding of SOC1, ISSP and NERC CIP standards.
• General understanding of Information Security, Server Infrastructure, and Networks.
• Understanding of physical and logical security controls.
• Effective written and oral communication skills.
• Strong organization skills and writing skills.
• Strong attention to detail and exceptional customer service skills.
• Ability to maintain confidentiality.
• Works independently with minimal supervision.

Responsibilities

• Initiate and track SOC 1 control activities
• Maintain SOC 1 control activity documentation
• Assist in gathering supporting documentation for internal and external SOC 1 testing
• Support the tracking of ISSP activities
• Maintaining ISSP documentation
• Initiate and track Generation Operations NERC CIP required control activities and tasks
• Perform various Generation Operation NERC CIP required reconciliations and checks
• Creating and maintaining Generation Operation NERC CIP documentation
• Assist in gathering supporting documentation for both internal and external audits of Generation Operation NERC CIP audits
• Ability to travel
• Adheres to and supports ACES corporate policies and regulatory requirements (NERC, FERC, state regs)
• Any additional responsibilities assigned by management

Skills

SOC 1

ISSP

NERC CIP

Information Security

Server Infrastructure

Networks

Security Controls

Communication

Confidentiality

Independent Work

Education

Bachelor of Science in Computer Science, Technology or related degree

Job description

This position is responsible for initiating and tracking IT compliance related activities, including but not limited to SOC 1, ISSP, and NERC CIP. This position will perform various reconciliations and checks as part of established activities designed to achieve and maintain compliance. Additionally, this position will coordinate with other groups to collect, analyze, and report on activities designed and implemented to achieve compliance objectives. This position must adhere to, administer, and maintain ISSP, SOC 1, and NERC CIP compliant IT practices and procedures.

Duties and Responsibilities

• Initiate and track SOC 1 control activities
• Maintain SOC 1 control activity documentation
• Assist in gathering supporting documentation to support both internal and external SOC 1 testing activities
• Support the tracking of ISSP activities
• Maintaining ISSP documentation
• Initiate and track Generation Operations NERC CIP required control activities and tasks
• Perform various Generation Operations NERC CIP required reconciliations and checks
• Creating and maintaining Generation Operation NERC CIP documentation
• Assist in gathering supporting documentation to support both internal and external audits of Generation Operation NERC CIP audits
• Ability to travel
• Adheres to and is supportive of all ACES corporate policies and complies with all regulatory requirements including but not limited to NERC, FERC and relevant state regulations as applicable to the position
• Any additional responsibilities assigned by management

Required Qualifications

• Bachelor of Science in Computer Science, Technology or related degree
• 2 years of experience in a Technical or Compliance Role
• Understanding of SOC1, ISSP and NERC CIP standards
• General understanding of Information Security, Server Infrastructure, and Networks
• Understanding of physical and logical security controls
• Effective written and oral communication skills
• Strong organization skills and writing skills
• Strong attention to detail and exceptional customer service skills
• Ability to maintain confidentiality
• Works independently with minimal supervision