NERC CIP Physical Security Compliance Lead

FirstEnergy Corp; Akron (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

FirstEnergy Corp is seeking a Physical Security Compliance Specialist to lead and sustain compliance programs across CIP standards and audits. The role involves developing policies, coordinating audits with regulators and internal teams, and ensuring records and evidence meet regulatory requirements.

Ideal candidates will have a strong background in NERC CIP, security governance, and experience with RSAWs and incident investigations. On-site work within the FE footprint is required.

Qualifications

• Bachelor's degree in Business Administration, or related field preferred with a recommended minimum of 7 years professional work experience.
• Must have a demonstrated working knowledge of compliance related to NERC CIP standards
• Must be able to successfully complete a background investigation to obtain CIP access
• Knowledge of physical security compliance controls, regulatory matters, and business applications preferred
• Ability to make accurate decisions and demonstrate sound judgment
• Proven ability to develop programs, training, policies, procedures, reports, and mitigation plans
• Ability to write and follow work plans
• Proficient in Microsoft Office applications
• Exceptional teamwork and interpersonal skills to aid in the resolution of compliance issues
• Strong organizational skills for planning, developing, and performing assessments and coordinating resolution of compliance issues
• Flexibility to travel which could include overnight stays
• Teamwork, communication, and innovation are essential, as well as taking independent initiative on tasks to be completed
• Excellent communication skills to effectively annotate findings in both written and verbal form
• Ability to write at a professional level to ensure a consistent understanding of the subject matter across multiple knowledge levels
• Certification as a Physical Security Professional (PSP), Certified Protection Professional (CPP), Pro-Watch Badge Administrator, or equivalent professional certification required
• FirstEnergy internal Compliance Champion certification required within 6 months of assignment
• Bachelor's degree in Business Administration or related field with a recommended minimum of 10 years professional work experience. Must have demonstrated strong performance Must work at a higher level of responsibility with greater self-direction Considered a subject matter expert

Responsibilities

• Develop, support, and implement the ongoing strategy of the FE physical security compliance programs to meet company, state, and federal regulatory requirements (NERC, NRC, PJM, TSA, etc.)
• Ensure effective regulatory compliance to the NERC CIP Standards by providing guidance to support and enhance physical security programs
• Develop and maintain FE compliance policies, programs, procedures, and guidelines related to the NERC CIP Standards
• Develop and maintain Corporate Security policies consistent with physical security best practices
• Develop and maintain RSAW, evidence documentation, and basis of compliance certifications for each NERC CIP Standard that is owned by or applies to Physical Security
• Support state based physical security regulatory requirements
• Prepare, coordinate and support compliance audits conducted by internal resources, consultants, or regulatory organizations such as RF, PJM, NERC, FERC, TSA, and state agencies
• Serve as a physical security representative for all audits, audit investigations, and planning teams for potential compliance concerns
• Conduct compliance investigations and document root cause analysis regarding potential violations and ensure they are tracked for timely resolution and fully documented in auditable records
• Utilize FE technology (RAAD, Pro-Watch, Salto, ITNow, CATSWeb, Content Navigator, Empower, SharePoint) to assign, track, and monitor compliance efforts
• Manage the regulatory required maintenance and testing program
• Manage the regulatory required visitor control program
• Manage required training such as CIP training and Physical Security Awareness Training
• Conduct research and interpret regulatory standards and policies to ensure Corporate Security business practices align with compliance requirements
• Participate in compliance champion meetings, CIP change meetings, and internal and external planning and development meetings, such as CIP Core Team, CIPC, NERC Reviews, Peer Reviews, and NATF Forum
• Conduct internal assessments to ensure implemented compliance programs satisfactorily meet regulatory requirements
• Develop and conduct assessments related to Security Operations Center (SOC) operations to ensure they operate in compliance with regulatory requirements, as well as company policies and procedures
• Provide subject matter expert support to contract labor
• Serve as a Speak Up resource

Skills

NERC CIP compliance

Regulatory compliance

Audits & investigations

Policy development

Microsoft Office

Education

Bachelor's degree in Business Administration or related field

Tools

RAAD

Pro-Watch

Salto

ITNow

CATSWeb

Content Navigator

Empower

SharePoint

Job description

FirstEnergy Corp is seeking a Physical Security Compliance Specialist to lead and sustain compliance programs across CIP standards and audits. The role involves developing policies, coordinating audits with regulators and internal teams, and ensuring records and evidence meet regulatory requirements.

Ideal candidates will have a strong background in NERC CIP, security governance, and experience with RSAWs and incident investigations. On-site work within the FE footprint is required.