Staff, Compliance Coordinator

Socket.dev; Birmingham (AL); On-site; USD 85,000 - 110,000; Full time

Job summary

The Southern Company is seeking a NERC Internal Controls & Compliance Coordinator to design, manage, and oversee internal controls and the monitoring program for NERC CIP Cyber Security compliance. You will coordinate with policy groups and subsidiaries to ensure alignment with corporate standards and regulatory requirements.

Qualifications include a bachelor’s degree in Business, Information Systems or Engineering, with 3 years in operations and compliance roles; CIA/CISA/CFE or COSO preferred;

Qualifications

• Bachelor's degree in Business, Information Systems or Engineering.
• CIA, CISA and/or CFE preferred.
• COSO Certification preferred.

Responsibilities

• Develop and maintain internal controls to support NERC CIP Cyber Security Standards.
• Monitor and report on internal control program effectiveness to management.
• Coordinate with policy groups and subsidiary teams to ensure program alignment.
• Assist in documenting policies, procedures, risk assessments, and audit evidence.
• Support management in identifying non-compliances and remediation actions.
• Lead or support compliance-related program projects across matrix organizations.

Skills

Communication skills

Regulatory understanding

Project management

Analytical skills

Education

Bachelor's degree in Business/IS/Engineering

CIA/CISA/CFE (preferred)

COSO (preferred)

Tools

MS Word

MS PowerPoint

MS Outlook/Teams

SharePoint

MS Excel

MS Project

Job description

JOB SUMMARY

The position exists to provide staff support to the NERC Internal Controls Manager responsible for developing and executing an effective internal control program to prevent and detect non-compliance with NERC Reliability Standards and Southern Company policies. The position also exists to ensure that Southern Company Operations Compliance Programs are consistent and coordinated with Southern Company and subsidiary Compliance Programs.

POSITION RESPONSIBILITIES

General position responsibilities fall into three primary categories: Program Management, Monitoring & Enforcement, and Liaison:

Program Management

is broad in scope and requires the coordinator to maintain knowledge of issues in the areas of NERC and CIP Cyber Security regulatory compliance. Subject areas and issues must be reduced to program-level activities which ensure compliance, are easy to comprehend by employees and that incorporate Our Values / Southern Company Culture.

Monitoring & Enforcement

is critical to prevent, detect and correct non-compliant actions and unethical conduct.The coordinator assists in developing feedback and monitoring mechanisms to evaluate internal control program effectiveness and to notify management of potential non-compliances to allow for appropriate audit or investigation.

Liaison

activities with internal policy groups and subject matter experts are key to program success. Gaining synergy and support within other functional areas and subsidiary companies solidifies endorsement, acceptance and implementation of system-level programs as well as ensures consistency across Operations.

Job Responsibilities

Specifically, the NERC Internal Controls & Compliance Coordinator assists in the design, management, direction and oversight of the following: (i) developing a risk assessment specific to NERC Reliability and CIP Cyber Security Standards compliance; (ii) developing a program for identifying, designing and documenting internal controls that support Southern Company’s compliance with NERC Reliability and CIP Cyber Security Standards; (iii) developing a program for periodic monitoring and testing of internal controls including the reporting of internal control concerns and recommendations to management; (iv) developing program (control framework) documentation to ensure repeatability and consistency in program execution; (v) special projects as directed by the NERC Internal Controls Manager or the Operations Compliance Director.

JOB REQUIREMENTS

Education:

• Bachelor's degree required in Business, Information Systems or Engineering.
• Certified Internal Auditor (CIA), Certified Information System Auditor (CISA) and/or Certified Fraud Examiner (CFE) preferred.
• COSO Certification preferred.

Experience:

• 3 years Operations experience in Generation, Power Delivery, or similar preferred.
• 3 years supporting compliance-related activities specific to NERC Reliability Standards (including Cyber Security and Information Technology experience applying cyber security standards) preferred.
• Experience leading team or organizational efforts to comply with regulatory requirements.
• Experience developing and maintaining compliance-related documentation including policies, procedures, risk assessments, and audit evidence.
• Experience developing technical documentation including procedures, flow-charts, specifications, cost estimates, business cases, requests for information, etc.
• Experience successfully working across matrix organizations.
• Experience facilitating communications about compliance-related topics.
• Experience identifying opportunities for process efficiencies and implementing process improvements.
• Experience in developing or testing internal controls designed to ensure work practices are successfully completed.

Knowledge, Skills, and Abilities:

• Strong oral and written communication, evaluation, and analytical skills are required to be successful in this role.
• Thorough understanding of energy regulation laws and standards and of the principles of an effective internal controls program specific to energy regulation.
• Ability to interpret control frameworks and regulations, identify and prioritize risks, and assist in the design and execution of management programs and internal controls to effectively manage compliance risks.
• Ability to design and execute internal control monitoring programs on behalf of management.
• Ability to design and deliver internal control-related training programs on behalf of management.
• Strong interpersonal, facilitation, negotiation, and presentation skills to effectively communicate, consult, and build working relationships with employees, senior management, industry peers, regulatory contacts and contractors.
• Ability to manage multiple projects and demonstrate effective project management skills including planning, organizing, and directing.
• Computer skills, including proficiency with MS Word, MS PowerPoint (presentations), MS Outlook and Teams for Business as well as the ability to quickly learn vendor compliance software applications (e.g. WDesk, etc.)
• Proficiency in SharePoint, Microsoft Excel, MS Access, MS Project and/or other project management related applications are helpful.
• Able to partner with stakeholders in business units to find win-win solutions.

Behavioral Attributes:

• Commitment to Our Values: Safety First, Intentional Inclusion, Act with Integrity and Superior Performance.
• Continual learner, highly self-motivated, team player, flexible/adaptable, committed to diversity, positive attitude, open to change, able to overcome obstacles to making progress towards objectives, interested in learning and applying new technology.

Travel Requirements:

• This position can require limited travel – generally less than 25%.
• This will include rare overnight travel

ADDITIONAL DETAILS

• Please submit an updated resume with your application.

About Southern Company

Southern Company (NYSE:SO) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com.

Southern Company invests in the well‑being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well‑being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf. Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.