On-Site NERC CIP Compliance Lead & Audit Strategist

CONSOLIDATED ASSET MANAGEMENT SERVICES JUNIPER (TEXAS), LLC; Middletown (CT); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k

Flexible spending accounts

Tuition reimbursement

Job summary

CONSOLIDATED ASSET MANAGEMENT SERVICES JUNIPER (TEXAS), LLC in Middletown, CT is seeking a Sr. NERC CIP Compliance Specialist to lead on-site CIP compliance at our Low and medium-impact stations.

This role ensures continuous audit readiness, manages evidence, and partners with cross-functional teams to enforce secure operations. You will own CIP program activities, oversee patch management, RFIs, CVAs, and training, and maintain BES asset information.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, IT, Cybersecurity, or a related technical discipline (equivalent direct experience considered).
• Minimum of 5–10 years of professional experience in regulatory compliance, power utility operations, or industrial cybersecurity.
• At least 5 years of hands-on experience implementing and managing a NERC CIP compliance program across Medium or High-impact assets.
• Demonstrated success drafting RSAWs, preparing ERT responses, and managing RFIs during Regional Entity audits or spot-checks.
• Deep operational understanding of the 35-day patch/baseline lifecycle (CIP-007/010), security perimeters (CIP-005/006), and supply chain management (CIP-013).
• Ability to pass a mandatory NERC CIP-004 Personnel Risk Assessment and background check.

Responsibilities

• Build, optimize, and maintain on-site processes and documentation to ensure continuous adherence to NERC CIP standards.
• Maintain accurate cyber asset inventories and manage baseline change control workflows.
• Lead RSAW/ERT preparation and submission for Regional Entity audits, spot checks, and compliance investigations.
• Maintain compliant physical and electronic security perimeters and access controls for all site assets.
• Execute daily, monthly, quarterly, and annual CIP compliance activities in accordance with program procedures.
• Serve as the primary site contact for Regional Entities; coordinate cross-functional teams to fulfill RFIs and remediate findings.
• Deliver and support mandatory NERC CIP cybersecurity compliance training programs for site personnel.
• Direct the end-to-end patch management lifecycle, ensuring BES Cyber Assets are monitored and updated within regulatory timelines.
• Lead the annual testing, documentation, and reporting of the Cyber Security Incident Response Plan (CIP-008) and Recovery Plans (CIP-009).
• Orchestrate annual Critical Vulnerability Assessments (CVAs) while ensuring zero adverse impact to operational BES infrastructure.
• Oversee the identification, classification, and secure handling of Bulk Electric System (BES) Cyber System Information (BCSI).
• Lead supply chain risk assessments and collaborate with procurement/legal to enforce cybersecurity contract clauses.
• Conduct proactive internal compliance self-assessments; manage the identification, self-logging, and mitigation of compliance deviations.

Skills

NERC CIP

Compliance program

Audit leadership

Patch management

Incident response

RFI coordination

Education

Bachelor’s degree in Engineering, Computer Science, IT, Cybersecurity

Job description

CONSOLIDATED ASSET MANAGEMENT SERVICES JUNIPER (TEXAS), LLC in Middletown, CT is seeking a Sr. NERC CIP Compliance Specialist to lead on-site CIP compliance at our Low and medium-impact stations.

This role ensures continuous audit readiness, manages evidence, and partners with cross-functional teams to enforce secure operations. You will own CIP program activities, oversee patch management, RFIs, CVAs, and training, and maintain BES asset information.