NERC CIP Compliance Lead: BES & O&P Audits

Ethosenergy Power Solutions, LLC; Leesburg (VA); On-site; USD 145,000 - 165,000; Full time

Benefits offered by this job

Employee Referral Bonus

Professional development

Job summary

EthosEnergy Power Solutions, LLC seeks a NERC CIP Manager to develop, implement, and maintain the plant's CIP and O&P compliance programs across BES facilities. You will own day-to-day administration, coordinate with operations, IT/OT, security, and engineering, and serve as the primary contact for audits and self-certifications.

The role requires at least five years in NERC CIP or ICS/OT security, relevant certifications, and the ability to lead cross-functional remediation.

Qualifications

• Minimum 5 years of experience in NERC CIP compliance or ICS/OT security.
• Experience at a generation facility, transmission owner, or other registered NERC entity.
• Certifications such as CISSP, CISA, CISM, GICSP, or NERC-specific training/certificates preferred.
• Familiarity with compliance management software/GRC tools for evidence tracking and audits.
• Ability to pass a personnel risk assessment (PRA) and background check as required under CIP-004-6/7.

Responsibilities

• Own and maintain the site's NERC CIP compliance program.
• Coordinate with plant operations, IT/OT, physical security, and engineering teams.
• Serve as the primary liaison with the Regional Entity and NERC during audits and self-certifications.
• Lead internal mock audits and gap assessments to remediate compliance risks.
• Prepare Self-Reports, Mitigation Plans, and evidence packages for identified violations.
• Report compliance status and remediation progress to plant leadership and corporate stakeholders.

Skills

NERC CIP knowledge

Audit support

ICS/OT security

Policy writing

Stakeholder communication

Education

Bachelor's degree in Cybersecurity, IT, Engineering, or related field

NERC CIP training / recertification requirements

Tools

GRC tools

Job description

EthosEnergy Power Solutions, LLC seeks a NERC CIP Manager to develop, implement, and maintain the plant's CIP and O&P compliance programs across BES facilities. You will own day-to-day administration, coordinate with operations, IT/OT, security, and engineering, and serve as the primary contact for audits and self-certifications.

The role requires at least five years in NERC CIP or ICS/OT security, relevant certifications, and the ability to lead cross-functional remediation.