Manager, Compliance and Critical Infrastructure Protection

Chugach Electric Careers

Anchorage (AK)

On-site

USD 120,000 - 170,000

Full time

14 days+

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Health benefits

401K plan

Pension

Paid time off

Job summary

Chugach Electric Association is seeking an experienced Compliance leader to oversee NERC CIP compliance structures, governance, and regulatory alignment.

You will lead audits, manage regulatory interactions, and develop policies and controls for BES Cyber Systems, with a focus on risk management and incident response.

This on-site Anchorage role requires a 5-year track record in compliance/risk in utilities, strong knowledge of CIP standards, and collaboration with leadership and regulators.

Qualifications

Bachelor’s degree in Engineering, Information Technology, Cybersecurity, Business or related field, required. Master’s degree, preferred.

Responsibilities

Oversee corporate NERC and CIP compliance structures, processes, and program governance.
Establish and maintain policies, procedures, and internal controls for effectiveness and alignment with regulatory requirements.
Evaluate CIP cybersecurity and physical security programs and advise on enhancements to ensure alignment with regulatory requirements.
Oversee compliance with Railbelt Reliability Council CIP and Reliability Standards and other applicable NERC and FERC requirements.
Lead and manage audits, spot checks, and investigations.
Oversee organizational readiness for audits, spot checks on existing procedures and policy, and investigations, and coordinate responses to regulatory inquiries.
Review and evaluate regulatory documentation and evidence prepared by operational teams to ensure completeness and accuracy.
Direct risk assessments and mitigation activities for BES Cyber Systems and advise on mitigation strategies to ensure alignment with CIP requirements.
Monitor emerging threats and regulatory developments.
Review cybersecurity and physical security incident response plans for compliance with applicable regulatory requirements.
Assess alignment of OT and IT controls with applicable compliance standards and report findings to leadership.
Advise operational technical teams on incorporating compliance and CIP requirements into operational planning and system lifecycle processes.
Liaise with regulatory bodies and industry groups.
Participate in Railbelt Reliability Council Standards development workgroups.
Oversee development and delivery of CIP and Reliability Standards compliance training programs.
Prepare and deliver reports to leadership and the Board of Directors.
Lead internal self-assessments and mock audits.
Oversee and evaluate compliance documentation systems and tracking tools for consistency and quality.

Skills

NERC CIP Standards

Regulatory compliance

Audit management

Policy development

Risk assessment

Regulatory liaison

Attention to detail

Microsoft Office

Education

Bachelor’s degree in Engineering, Information Technology, Cybersecurity, Business or related field

Master’s degree preferred

Tools

Compliance tracking tools

Documentation systems

SCADA/ICS knowledge

Job description

Summary

Job Description

Essential Functions

Oversee corporate NERC and CIP compliance structures, processes, and program governance.
Establish and maintain policies, procedures, and internal controls for effectiveness and alignment with regulatory requirements.
Evaluate CIP cybersecurity and physical security programs and advise on enhancements to ensure alignment with regulatory requirements.
Oversee compliance with Railbelt Reliability Council CIP and Reliability Standards and other applicable NERC and FERC requirements.
Lead and manage audits, spot checks, and investigations.
Oversee organizational readiness for audits, spot checks on existing procedures and policy, and investigations, and coordinate responses to regulatory inquiries.
Review and evaluate regulatory documentation and evidence prepared by operational teams to ensure completeness and accuracy.
Direct risk assessments and mitigation activities for BES Cyber Systems and advise on mitigation strategies to ensure alignment with CIP requirements.
Monitor emerging threats and regulatory developments.
Review cybersecurity and physical security incident response plans for compliance with applicable regulatory requirements.
Assess alignment of OT and IT controls with applicable compliance standards and report findings to leadership.
Advise operational technical teams on incorporating compliance and CIP requirements into operational planning and system lifecycle processes.
Liaise with regulatory bodies and industry groups.
Participate in Railbelt Reliability Council Standards development workgroups.
Oversee development and delivery of CIP and Reliability Standards compliance training programs.
Prepare and deliver reports to leadership and the Board of Directors.
Lead internal self-assessments and mock audits.
Oversee and evaluate compliance documentation systems and tracking tools for consistency and quality.
Other duties as assigned.

Relationships

Internal

Chief Legal Officer: Report to, receive direction, guidance and decisions from.
Board of Directors: Give and receive information.
Division Managers and Leadership: Confer with, give and receive information.
Other Managers and Staff: Confer with, give and receive information.

External

Bargaining Unit Representatives
Regulators, State and Federal Agencies: Coordinate with, give and receive information.
Other Utilities: Coordinate with, give and receive information.

Competencies

Advanced knowledge of NERC Reliability and CIP Standards, FERC regulations, and regional requirements.
Knowledge of cybersecurity principles, SCADA/ICS environments, and BES Cyber Systems.
Proficiency with compliance tracking tools and documentation systems.
Ability to identify sensitive or confidential information and abide by confidentiality requirements.
Ability to perform in a fast paced and deadline-oriented environment.
Ability to organize workflow, manage multiple priorities, and effectively utilize resources.
Ability to apply tactical applications and decision making to long-term and strategic objectives.
Effective verbal, written, and negotiation skills with the capability to clearly convey both technical and strategic information to various audiences.
Proven ability to uphold ethical and professional conduct.
Advanced knowledge of Microsoft Office applications.

Supervisory Responsibility

This position does not have direct supervisory responsibility.

Work Environment

Work is performed in a standard office environment. Some evening and weekend work may be required occasionally. Occasional air travel is required. Attendance at Board of Directors’ meetings and conferences outside of the state may be required.

Minimum Qualifications And Experience

Education

Bachelor’s degree in Engineering, Information Technology, Cybersecurity, Business or related field, required. Master’s degree, preferred.

Experience

Five (5) years of progressively responsible experience, including working in a lead or primary role in compliance, cybersecurity, operations, or risk management, required. Experience managing NERC Reliability Standards, NERC CIP programs, or RRC CIP cybersecurity standards, preferred. Experience leading audits, investigations, and assessments, preferred. Experience in a utility or union environment, preferred.

Substitution

Additional professional experience in a similarly complex role or related field (above the 5-year minimum) may be substituted for the required education on a year-for-year basis.

Company Description

Chugach Electric Association is a member-owned cooperative, headquartered in Anchorage, Alaska's largest city. Anchorage itself sits at the base of the Chugach Mountains. Chugach is pleased to provide reliable, affordable power to more than 92,000 members from Anchorage to the northern Kenai Peninsula, and from Whittier on Prince William Sound to Tyonek on the west side of Cook Inlet. We service over 113,000 locations with 3,782 miles of transmission and distribution lines. We have many services that make it easy to power homes and businesses with Chugach.

A little more about us: Chugach has been around for a long time, recently celebrating 75 years! We are a stable company, in a stable industry. And while we may have stability, we are modern, sustainable and forward-thinking to ensure that we provide reliable services for generations to come. We also pride ourselves on the longevity of our employees. We have several 20, 30 and 40 + year tenured employees who continue foster an inclusive, innovative corporate environment. Find your spark!

Chugach's Corporate Vision

Responsibly developing energy to build a clean, sustainable future for Alaska.

Chugach's Corporate Mission

We provide safe, reliable, and affordable electricity through superior service and sustainable practices, powering the lives of our members.

Chugach's Corporate Values

Guided by our values of safety, accountability, and sustainability, we are committed to serving our members, the community, and the Chugach team.

Equal Employment Opportunity

It is a policy of Chugach Electric Association, Inc., to recruit, hire, train, promote, and compensate persons without regard to race, color, religion, national origin, sex, marital status, pregnancy, parenthood, physical or mental disability, veteran's status, age, or any other classification protected by applicable, federal, state, or local law.

Chugach is also an affirmative action employer.

Chugach Electric does not sponsor employment visas. Applicants must be authorized to work in the U.S. at the time of application and throughout employment. Employees must be able to provide documentation to Chugach Electric to show their identity and authorization to work.

Benefits

HEALTH BENEFITS

Premium & Deductible are paid for by Chugach Electric. The plan includes coverage of: