Sr. Compliance Analyst

OVERVIEW:

WETT is seeking a compliance resource with strong technical skills and experience specifically with respect to the relevant Critical Infrastructure Protection (CIP) standards as they apply to software/hardware baselines. The purpose of this role is multifaceted but includes significant engagement with the information technology (IT) team. The primary goal of this resource is to bridge the gap between the compliance and IT functions. In addition, the Senior Compliance Analyst will assist with ensuring WETT’s compliance with NERC/FERC Standards/Regulations and ERCOT Protocols, and Operations Guidelines in conjunction with other members of the compliance team. This position will monitor NERC regulatory requirements, coordinate evidence collection, assist in regulatory reporting, and support internal audits and investigations, and, in particular, how these requirements apply to the technical IT and cyber functions of WETT. The duties are based on project/program-specific needs identified by the Compliance Manager and include identifying compliance issues and concerns, as well as recommending potential mitigation plans. The Senior Compliance Analyst will also help maintain and administer a compliance management program to monitor and document WETT's compliance evidence and procedures. This position plays a key role in advancing the “culture of compliance” throughout the organization and reports directly to the Compliance Manager.

ESSENTIAL FUNCTIONS:

• Coordinate the collection, validation, organization, and retention of compliance evidence and assist with preparation for NERC, ERCOT, and other regulatory audits and investigations as needed and with a focus on the IT function.
• Partner with the IT/Cybersecurity team in particular but will also interact with Operations, Planning, Engineering, IT/Cybersecurity, Contracts, and other departments to promote a strong compliance culture.
• Assist in developing and maintaining the CIP and Operations & Planning (O&P) work plans required to implement WETT's compliance with relevant NERC Standards and with particular focus on the cybersecurity environment.
• Maintain expert knowledge and assist in the interpretation of regulations such as NERC Standards and ERCOT Protocols and Operating Guides that form the basis for the NERC and ERCOT Compliance Programs, as well as stay informed about the utility industry trends and practices.
• Apply a deep knowledge of IT processes and internal controls to better align WETT’s performance with Industry best practices.
• Revise standards, procedures, guidelines, and reports to maintain compliance measures that will affect the overall operation of WETT transmission assets.
• Investigate pertinent practices and recordkeeping of the functions within WETT Ensure that these practices adhere to both the compliance program and the document management system.
• Facilitate the development, management review, and implementation of remedial actions to resolve non-compliance issues and follow up on corrective action plans.
• Participate in the investigation of operational incidents that may lead to reportable events, perform sequence of event review, analysis of recorders and logs to perform root cause analysis to develop recommendations and corrective actions to prevent future occurrences.
• Participate in compliance reviews to assess WETT compliance with FERC/NERC standards and ERCOT Protocols and Operating Guides.
• Represent WETT at meetings of Texas RE and provide summaries of the proceedings.
• Assist in determining employee training needs, as well as assist WETT management in development and delivery of training courses.
• Actively apply the WETT safety and emergency preparedness programs while performing
• Participate in overall system safety reviews and training as requested.
• Perform other duties as assigned.

QUALIFICATIONS:

• A Bachelor's degree in Engineering, Business, or a related field and a minimum of 4 years of relevant work experience performing compliance work.
• Experience in the electric utility, energy, power generation, transmission, or ERCOT market.
• Fundamental understanding of technical requirements for compliance with NERC Reliability Standards, as they apply to electric system operations and planning, especially CIP and Transmission Operations.
• Detailed understanding of software/hardware baselines as they apply to CIP (firmware, software, ports and services, users and groups, etc).
• Familiarity with Systems and/or Network Administration concepts and protocols strongly preferred.
• Experience working with regulatory requirements, compliance controls, and cross-functional business teams including Engineering, Operations, and IT.
• Excellent organizational skills with the ability to apply them for activity tracking, documentation, and project management.
• Ability to prioritize tasks and work efficiently to manage many
• Very proficient computer skills using MS Excel, Word, and PowerPoint.
• Proven accuracy, reliability, and completeness in job accomplishment.
• Ability to work independently and follow through on assignments.
• Effective oral and written communication skills.
• Effective interpersonal skills.