Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Manager, CIP Compliance role.

Rezi rewrites your resume against NORTHEAST POWER COORDINATING's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Manager, CIP Compliance posting at NORTHEAST POWER COORDINATING — free, in seconds.

About the Role

The Manager, CIP Compliance leads and oversees Critical Infrastructure Protection (CIP) compliance monitoring activities within NPCC's Compliance Monitoring and Enforcement Program (CMEP). This role manages CIP compliance monitoring engagements, supervises staff, supports risk-based compliance monitoring initiatives, and fosters effective relationships with stakeholders.

Responsibilities

Ensures processes and procedures are established, maintained, and continuously improved to support CIP Compliance Audits, Self-Certifications, Spot Checks, and other compliance monitoring activities.
Periodically reviews and updates compliance monitoring processes to incorporate changes to NERC Rules of Procedure, CMEP guidance, FERC Orders, Canadian agreements, emerging risks, and ERO Enterprise initiatives.
Supports the implementation of risk-based compliance monitoring activities through the evaluation of entity risks, internal controls, compliance history, and other relevant risk indicators.
Assists in the development and execution of annual compliance monitoring plans, monitoring strategies, and related program initiatives.
Supports the Director of Compliance Monitoring in developing, maintaining, and reporting compliance monitoring documentation, records, metrics, and key performance indicators.
Manages CIP compliance monitoring engagements across the United States and Canada in accordance with NERC Rules of Procedure, NPCC programs, and applicable provincial agreements.
Serves as Audit Team Lead for assigned engagements, directing audit activities, coordinating resources, facilitating team discussions, reviewing work products, and ensuring the quality and consistency of engagement results.
Assists in developing compliance monitoring scopes using risk-informed considerations, including inherent risk assessments, internal controls evaluations, compliance history, and other relevant factors.
Reviews audit workpapers, engagement documentation, reports, and other compliance monitoring deliverables to ensure accuracy, consistency, quality, and adherence to NPCC and ERO Enterprise expectations.
Ensures compliance monitoring activities are completed in accordance with established timelines and milestones.
Identifies CIP compliance trends, emerging risks, and industry developments and contributes to the creation of lessons learned, outreach materials, and analytical reports.
Maintains a thorough understanding of NERC Rules of Procedure, Reliability Standards, standards under development, and related industry initiatives.
Supervises, coaches, and develops CIP compliance monitoring staff through performance management, mentoring, technical guidance, and professional development opportunities.
Monitors staff performance and supports employee growth through training, succession planning, and continuous development initiatives.
Supports recruitment and hiring activities, including candidate sourcing, interviewing, selection, and onboarding.
Develops and maintains effective working relationships with Registered Entities, NERC, Regional Entities, and other industry stakeholders.
Facilitates constructive discussions with Registered Entities regarding audit scope, evidence requests, internal controls, compliance monitoring results, and opportunities for continuous improvement.
Ensures CIP compliance monitoring staff adhere to NPCC policies and procedures.
Develops and delivers training, education, outreach, and communications to NPCC staff, Registered Entities, and ERO Enterprise personnel.
Represents NPCC on ERO Enterprise committees, task forces, working groups, and special projects.
Performs other duties and special projects as assigned.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, Cybersecurity, or a related technical field and ten (10) or more years of relevant industry experience; or an equivalent combination of education and experience.
Minimum ten (10) years of experience in the electric utility industry or a related technical field with experience in one or more of the following areas: Desktop and systems design; Evaluating compliance programs, internal controls, risk mitigation practices, or governance processes associated with NERC Reliability Standards; Ability to analyze compliance monitoring results, identify trends, and develop recommendations and reports for management and industry stakeholders.
Experience managing compliance monitoring activities conducted under delegated regulatory authority.
Experience working with Canadian provincial reliability agreements, Memoranda of Understanding, or cross-border regulatory frameworks.
Experience implementing risk-based compliance monitoring programs and evaluating internal controls.
Proficiency in the NP-View network analysis tool.
Experience participating in ERO Enterprise working groups, committees, task forces, or industry initiatives.
Experience developing strategic plans, departmental budgets, performance metrics, and organizational goals.
Experience with risk-based compliance monitoring methodologies.
Experience evaluating and testing compliance-related internal controls.
Experience serving on ERO Enterprise task forces, working groups, standards drafting teams, or industry committees.
Prolonged periods of working on a computer.
Travel to main office and in-person meetings, as required.
Ability to work and travel within the U.S. and travel to Canada.

Skills

Strong leadership, supervisory, coaching, and mentoring skills.
Ability to lead cross-functional teams and manage complex compliance monitoring engagements.
Ability to exercise sound professional judgment in complex or sensitive compliance matters.
Strong analytical, problem-solving, and critical-thinking skills.
Excellent verbal, written, and presentation skills.
Ability to communicate technical and regulatory concepts effectively to executive, technical, and non-technical audiences.
Excellent interpersonal, relationship-building, and conflict-resolution skills.
Strong project management, organizational, and prioritization skills.
Ability to manage multiple projects and competing priorities in a dynamic regulatory environment.
Ability to effectively engage and collaborate with internal and external stakeholders.
Ability to develop and deliver professional presentations and training programs.
Strong attention to detail and commitment to quality.
Strong teamwork and collaboration skills.
Advanced proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, and Teams.
Ability to participate in and lead virtual teams.
Demonstrated sound judgment, professionalism, and commitment to integrity, confidentiality, and ethical conduct.

Location

Remote

Work Type

Full-time
Remote

Experience Level

Ten (10) or more years of relevant industry experience
Minimum ten (10) years of experience in the electric utility industry or a related technical field

Education Level

Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, Cybersecurity, or a related technical field
Master's degree in Information Systems, Computer Science, Computer Engineering, Cybersecurity, or a related field

About the Company

NPCC is an Equal Opportunity Employer.

Equal Opportunity

We prohibit discrimination on the basis of the individual’s actual or perceived disability, protected veteran status, race, color, sex, age, national origin, religion, sexual orientation, gender, gender identity, gender expression, genetic information, marital status, citizenship, domestic violence victim status, or any other status protected under federal, state or local law.