IT Information Security Compliance Administrator

Eagle Creek Renewable Energy LLC; Badin (NC); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Eagle Creek Renewable Energy LLC is seeking an experienced IT Networking & Information Security Compliance Administrator for a hybrid role. The candidate will blend hands-on network administration with governance, risk, and compliance duties to safeguard our hydropower assets and meet regulatory requirements.

The ideal candidate translates complex NERC CIP and NIST standards into clear, documented controls, supports OT/IT networks across facilities, and provides Tier 1/2 support while

Qualifications

• Bachelor's degree or equivalent experience in information security, information systems, computer science, engineering, or related field.
• Experience in regulatory compliance, audit, GRC, or internal controls, preferably in electric utility or regulated environments.
• Knowledge of NERC CIP compliance lifecycle, including self-certification, self-reporting, mitigation, and audit.

Responsibilities

• Monitor networks and systems for security breaches and incidents; produce detailed reports and maintain audit-ready evidence.
• Administer and troubleshoot LAN/WAN infrastructure, security controls, and OT/IT networks across multiple sites.
• Provide Tier 1/2 support for hardware, software, network connectivity, VPN, and remote access; maintain knowledge base.

Skills

Network administration

IT support

Regulatory compliance/GRC

Audit & documentation

NERC CIP/NIST familiarity

Cross-functional collaboration

Education

Bachelor's degree in information security or related field

Tools

Cisco

Palo Alto

Fortinet

VPN/IDS-IPS

Job description

About the role:

Eagle Creek Renewable Energy is seeking an experienced IT Networking & Information Security Compliance Administrator. This hybrid role combines hands‑on network administration and IT helpdesk support with responsibility for safeguarding our regulatory standing and the security of critical generation assets across our hydropower fleet. The ideal candidate has practical experience supporting enterprise and operational technology (OT) networks and can translate complex regulatory requirements — especially NERC CIP and NIST — into clear, well‑documented controls.

What You’ll Do:

• Monitor networks and systems for security breaches or suspicious activity; investigate incidents and produce detailed reports. Track new and revised NERC standards and FERC orders; perform gap analyses and translate changes into actionable requirements. Develop, maintain, and test internal controls and policies; keep documentation audit‑ready
• Administer and troubleshoot LAN/WAN infrastructure, including switches, routers, firewalls, wireless access points, and VPN concentrators. Manage IT and OT network infrastructure at hydropower facilities, ensuring high availability and reliability. Implement network security controls (ACLs, segmentation, IDS/IPS) and support vulnerability scanning and remediation. Review proposed system and infrastructure changes for security, compliance, and architectural impact
• Provide Tier 1/Tier 2 support for hardware, software, network connectivity, VPN, and remote access issues. Maintain accurate ticket documentation and contribute to knowledge base articles

What Skills and Experience You’ll Need:

• Education and Experience:
  • Bachelor’s degree in information security, information systems, computer science, engineering, or a related field, or equivalent experience
  • Proven experience in regulatory compliance, audit, GRC, or internal controls, ideally in electric utility, energy, or another regulated or critical‑infrastructure environment
  • Working knowledge of the NERC CIP compliance lifecycle, including self‑certification, self‑reporting, mitigation, and audit
• Hands‑on experience in network administration and/or IT support, ideally in a multi‑site or critical‑infrastructure environment
• Regulatory compliance/audit experience is a plus; working knowledge of the NERC CIP compliance lifecycle is a strong plus
• Strong practical skills with network hardware/software (Cisco, Palo Alto, Fortinet or similar), TCP/IP, VLANs, routing, switching, firewalls, VPNs, and wireless
• Communication and Collaboration:
  • Strong written communication and documentation discipline to produce audit‑ready evidence and clear compliance reporting
  • Ability to collaborate and work cross‑functionally with teams such as IT, operational technology, physical security, legal, and management
• Certifications (preferred): CompTIA Network+/Security+, Cisco CCNA/CCNP, and/or NIST/NERC CIP‑related training