NERC CIP Compliance Leader

NRG Energy; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

NRG Energy is seeking an experienced Regulatory Compliance professional to lead the NERC CIP program within the Legal Department. You will own governance, interpret standards, develop controls, gather evidence, and drive audit readiness for CIP obligations across the organization.

Travel up to 30% within the U.S. and collaboration with OT Security, Plant Operations, IT, and Enterprise Security will be essential to ensure compliance, policy development, and timely responses to audits and

Qualifications

• Bachelor's degree in computer science, cyber security, business administration, or related field; experience may substitute.
• 8–10 years direct work experience in regulatory compliance, audit, or cyber security in power sector.
• Proven CIP program implementation/maintenance experience.
• Strong understanding of NERC CIP standards and audit prep experience.

Responsibilities

• Oversee all aspects of the NERC CIP program and maintain audit readiness.
• Serve as liaison with auditors, regulators, and stakeholders.
• Interpret CIP standards and assess implications of new revisions.
• Manage CIP standards development and voting.
• Act as primary point of contact for CIP compliance across departments.
• Develop internal controls and evidence to demonstrate compliance.
• Investigate anomalies and prepare corrective actions.
• Collaborate with OT Security, Plant Operations, IT, and Enterprise Security on CIP.
• Develop metrics and reporting on CIP program status and risks.
• Prepare materials for self-certifications, audits, and risk assessments.
• Conduct periodic CIP assessments and identify improvement actions.
• Perform other duties as assigned.

Skills

Regulatory communications

Auditing

Regulatory understanding

Analytical thinking

Project management

Interpersonal skills

Policy interpretation

Technical writing

Stakeholder collaboration

Education

Bachelors in CS, Cyber Security, BA, or related

8–10 years in regulatory compliance/audit/cyber security in electric utility/IPPs

NERC CIP standards knowledge

CISA/CISM/CISSP/CRISC cert (preferred)

Experience with NERC CIP audit processes (RSAWs, evidentiary docs)

Tools

NERC CIP tools (Align, SEL, SBS)

GRC tools (Sigmaflow, RSA Archer)

Job description

NRG Energy is seeking an experienced Regulatory Compliance professional to lead the NERC CIP program within the Legal Department. You will own governance, interpret standards, develop controls, gather evidence, and drive audit readiness for CIP obligations across the organization.

Travel up to 30% within the U.S. and collaboration with OT Security, Plant Operations, IT, and Enterprise Security will be essential to ensure compliance, policy development, and timely responses to audits and