Senior NERC CIP Compliance Lead

Camstex; Middletown (CT); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k

Tuition reimbursement

Employee referral program

Job summary

Camstex in Middletown, CT seeks a Sr. NERC CIP Compliance Specialist to lead on-site compliance for Low/Medium‑impact generating stations. You will drive continuous NERC CIP standards, manage audits, and oversee training and evidence management.

The role requires 5–10 years in regulatory compliance or industrial cybersecurity, on-site work, and travel up to 25%. Strong RSAW/ERT experience is essential, with a focus on BES asset protection and risk management.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, IT, Cybersecurity, or a related technical discipline (equivalent direct experience considered).
• Minimum of 5–10 years of professional experience in regulatory compliance, power utility operations, or industrial cybersecurity.
• At least 5 years of hands‑on experience implementing and managing a NERC CIP compliance program across Medium or High‑impact assets.
• Demonstrated success drafting RSAWs, preparing ERT responses, and managing RFIs during Regional Entity audits or spot‑checks.
• Deep operational understanding of CIP‑007/010 lifecycle, CIP‑005/006 perimeters, and CIP‑013 supply chain management.
• Ability to pass a mandatory NERC CIP‑004 Personnel Risk Assessment and background check.
• Ability to work full‑time on‑site and travel up to 25%.
• Ability to perform physical job duties in industrial environments.

Responsibilities

• Build, optimize, and maintain on-site processes and documentation for ongoing NERC CIP adherence.
• Maintain accurate cyber asset inventories and baseline change control workflows.
• Lead RSAW/ERT preparation and submission for audits, spot checks, and investigations.
• Maintain compliant physical and electronic security perimeters and access controls.
• Coordinate RFIs and remediation efforts with cross‑functional teams.
• Deliver and support mandatory NERC CIP cybersecurity training programs.
• Direct patch management lifecycle for BES Cyber Assets within regulatory timelines.
• Lead incident response drills and reporting for CIP-008 and CIP-009.
• Orchestrate annual CVAs with no adverse impact to BES infrastructure.
• Oversee handling of BES Cyber System Information (BCSI) securely.
• Lead CIP-013 supply chain risk assessments with procurement/legal teams.
• Conduct internal self-assessments and manage deviations.

Skills

NERC CIP compliance

Regulatory compliance

On-site leadership

Audit readiness

Cross-functional collaboration

Incident response planning

Patch management

Vulnerability assessments

Supply chain risk management

RSAW documentation

Education

Bachelor's degree in Engineering/CS/IT

Equivalent direct experience

Job description

Camstex in Middletown, CT seeks a Sr. NERC CIP Compliance Specialist to lead on-site compliance for Low/Medium‑impact generating stations. You will drive continuous NERC CIP standards, manage audits, and oversee training and evidence management.

The role requires 5–10 years in regulatory compliance or industrial cybersecurity, on-site work, and travel up to 25%. Strong RSAW/ERT experience is essential, with a focus on BES asset protection and risk management.