Strategic Senior NERC CIP Compliance Analyst

ENGIE; Georgia; Hybrid; USD 89,000 - 136,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Short-term disability

Long-term disability

ESPP

Paid time off

Job summary

ENGIE North America is seeking a Senior Analyst, NERC CIP Compliance, to support administration, assessment, and continuous improvement of CIP standards across renewables and power operations. You will maintain controls, evidence, and audit materials while collaborating with Operations, Cybersecurity, IT, OT, Engineering, and Security teams.

Your day-to-day includes coordinating control activities, tracking corrective actions, and preparing management materials.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, engineering, business, regulatory compliance, risk management, or a related field.
• Minimum five (5) years of experience in NERC compliance, cybersecurity compliance, utility or independent power operations, OT, engineering, audit, or related electric-power discipline.
• Experience interpreting, implementing, assessing, or supporting NERC CIP Reliability Standards within an operational, technical, cybersecurity, or regulatory environment.
• Experience supporting audits, spot checks, self-certifications, RFIs, investigations, or other compliance monitoring and readiness activities.
• Experience developing or maintaining compliance procedures, internal controls, control narratives, evidence records, implementation plans, action trackers, or corrective-action documentation.
• Working knowledge of cybersecurity governance, OT, control systems, access management, physical security, incident response, recovery, vulnerability management, or supply-chain risk.
• Ability to review technical and compliance documentation, identify inconsistencies or evidence gaps, coordinate multiple deadlines, and communicate findings clearly.

Responsibilities

• Support the implementation and maintenance of applicable NERC CIP requirements by developing procedures, internal controls, control narratives, work instructions, evidence requirements, and implementation plans.
• Coordinate with cybersecurity, IT, OT, Physical Security, Operations, HR, Procurement, vendors, and site teams to document CIP controls and follow activities through completion.
• Maintain BES Cyber System and asset records, applicability matrices, control inventories, system documentation, access records, evidence repositories, calendars, exception logs, and other compliance documentation.
• Prepare for NERC and Regional Entity audits, spot checks, self-certifications, RFIs, and other monitoring activities by organizing evidence and readiness trackers.
• Support review of potential compliance concerns by coordinating fact-finding, preserving documentation, tracking corrective actions, and escalating risks to leadership.
• Monitor new and revised CIP standards, regulatory guidance, implementation plans, and enforcement developments; coordinate actions, milestones, training, and readiness.
• Support periodic access reviews, control testing, technical assessments, incident and recovery exercises, data-quality reviews, and after-action activities while preparing dashboards and risk summaries.

Skills

NERC CIP

Regulatory compliance

Audit readiness

Evidence management

Cross-functional collaboration

Education

Bachelor’s degree

Job description

ENGIE North America is seeking a Senior Analyst, NERC CIP Compliance, to support administration, assessment, and continuous improvement of CIP standards across renewables and power operations. You will maintain controls, evidence, and audit materials while collaborating with Operations, Cybersecurity, IT, OT, Engineering, and Security teams.

Your day-to-day includes coordinating control activities, tracking corrective actions, and preparing management materials.