Senior NERC CIP Compliance Lead

SOLV Energy, Inc.; Massachusetts; Vor Ort; USD 105.000 - 136.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Paid vacation and holidays

Zusammenfassung

SOLV Energy, Inc. is seeking a Senior CIP Compliance Analyst to lead the NERC CIP program, monitor compliance, and ensure audit readiness across IT, cybersecurity, OT, and operations. You will mentor analysts and own remediation planning while coordinating regulatory reporting for nationwide utility-scale projects.

The role emphasizes policy development, evidence standards, and proactive program maturation to strengthen the organization’s cybersecurity posture.

Qualifikationen

• Bachelor’s degree or equivalent experience in IT/security.
• 7+ years of experience with NERC CIP compliance and audits.
• Ability to lead initiatives end-to-end and mentor peers.
• Familiarity with SOX, NIST, ISO27001 or similar standards.
• Strong written and verbal communication with regulators and teams.

Aufgaben

• Own day-to-day administration of the CIP program and drive process improvements.
• Lead development and maintenance of CIP policies, procedures, and controls.
• Coordinate internal and external audits, self-certifications, and spot checks.
• Design evidence gathering strategies and ensure audit readiness.
• Develop and deliver CIP training and awareness programs.

Kenntnisse

NERC CIP knowledge

Audits & self-certifications

Independent ownership

SOX familiarity

NIST familiarity

ISO27001 familiarity

Security documentation

Communication skills

Mentorship

ICS/OT security knowledge

Ausbildung

Bachelor’s degree in IT/Info Security/Cybersecurity

Jobbeschreibung

SOLV Energy, Inc. is seeking a Senior CIP Compliance Analyst to lead the NERC CIP program, monitor compliance, and ensure audit readiness across IT, cybersecurity, OT, and operations. You will mentor analysts and own remediation planning while coordinating regulatory reporting for nationwide utility-scale projects.

The role emphasizes policy development, evidence standards, and proactive program maturation to strengthen the organization’s cybersecurity posture.