Sr. Analyst CIP Compliance

Posted 4 days ago

txu energyIrving (TX)
Compliance ManagersOther Electric Power Generation

SENIORITY

Senior

Apply

About the role

Sr. Analyst CIP ComplianceThe Sr. Analyst CIP Compliance position will be responsible for providing leadership, independent compliance oversight, guidance, and direction needed to maintain on-going compliance with all applicable NERC CIP Reliability Standards and internal policy in support of reliable and secure operations of the bulk power system. This position works directly with both internal operations and security teams and external regulatory organizations. This position will be ensuring that compliance drives operational best practices, delivering on agreed upon service expectations and procedures, and drive profitability improvement initiatives for Vistra. This position is a key member of the Legal & Regulatory Compliance CIP centralized and independent governance and oversight team within Vistra. Locations can include non-retiring plant sites and/or existing Vistra office sites.Key AccountabilitiesDemonstrate clear technical cybersecurity and programmatic understanding of all NERC CIP standards.Lead and facilitates progress on all compliance related activities such as audits, self-certifications, mock-audits, that includes mitigation plan development and documentation of completion.Lead and facilitate response to regulatory compliance monitoring activities such as audits, self-certifications, mock-audits, enforcement actions, compliance filings, data reporting and data request.Provide guidance and independent compliance oversight in developing, implementing, and executing project plans goals and timelines for implementation of internal controls.Lead and collaborate with process owners and other staff to provide input and technical support in the development and execution of CIP related projects implementing new or modified CIP standards. This may include supporting the formation and creation of new or modified CIP standards.Lead and facilitate violation determination and issue management process. Apply technical CIP expertise in problem solving and producing recommendations and alternative solutions to remediate the violation and to support on-going compliance.Develop and assist in development and maintenance of documentation for CIP related programs, processes, and procedures.Education, Experience, & Skill Requirements5-8 years of experience with an understanding in one or more of the following: NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA, NRC.1-3 years of relevant NERC CIP experience.Ability to manage multiple initiatives simultaneously in a dynamic, fast-paced environment.Strong reading comprehension and written communication skills.Experience with Security or Compliance best practices.Experience with ICS devices, Generation or Transmission assets is preferred.Professional certification a plus (e.g., PPM, CISM, CISA, CISSP, PE).Experience gained through college degree programs and or certifications in engineering, business, technology, or other related fields is applicable to the above mentioned skills and experience requirements.Key Metrics100% - Meeting various regulatory reporting deadlines.100% - Meeting new or modified CIP standard implementation deadlines.Meet or exceed compliance control deadlines.Job Family: Legal/ComplianceCompany: Vistra Corporate Services CompanyLocations: Irving, Texas Texas

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this