Principal Compliance & Risk Consultant-Flexible Location

About the position The Principal of NERC, FERC and TSA Cybersecurity compliance is responsible for supporting the organization’s compliance, governance, and program execution related to the federal and industry-mandated standards. This role ensures enterprise-wide alignment with company policies, standards and procedures and is part of the NERC O&P Compliance Team. The Enterprise NERC, FERC, TSA Compliance (ENFTC) team functions as the 2nd line of defense in the 3 lines model providing independent oversight of compliance programs. The position partners with executive leadership and functional area compliance owners to maintain and develop compliance processes for monitoring and reporting program health, identifying and mitigating risk, as well as managing new and changing regulatory requirements. This role will regularly meet with senior leadership in various functional areas to communicate issues, coordinate cross-functional actions and recommend improvements. This position performs outreach and coordination, leads technology strategy, and acts as the interface with external regulators. The successful candidate will have a deep understanding of federally regulated compliance programs and strategy. They will build bridges with internal and external partners to manage compliance with the goal of maintaining the security and reliability of critical infrastructure. The candidate will have strong interpersonal skills and a focus on continuous improvement. This position is hybrid, working from your remote office and your assigned work headquarters in Oakland.

Responsibilities

• Provide expertise to leadership and cross-functional teams regarding development, implementation, and monitoring of controls and mitigation plans.
• Develop compelling data-driven business cases for or against specific courses of action and potential risk mitigation alternatives as appropriate.
• Lead company response to regulatory data requests, investigations, audits, and other inquiries.
• Regularly updates leadership on changes to requirements/standards, metrics, program effectiveness, and opportunities for improvement.
• Lead issue investigations, cause evaluation exercises and develop corrective actions to remediate and mitigate compliance issues.
• Participate in risk management forums at the enterprise level.
• Complete assigned projects, tasks or support activities outlined in the team’s annual work plan based on program priorities and compliance risk.
• Develop and analyze business processes to identify, design or improve internal controls
• Perform internal controls assessments including design and operational effectiveness testing.
• May act as team lead but does not have any direct reports.
• Develop partnerships with functional area teams to ensure consistency of compliance approach and promote an effective enterprise compliance culture.
• Expert level knowledge of assigned area of business including NERC processes and procedures
• Strong problem solving, project management, and change management skills
• Strong written and verbal communication skills and ability to communicate complex data effectively to a variety of audiences including executives
• Ability to influence others to achieve understanding, acceptance, and commitment to act Requirements
• BA/BS or equivalent work experience in business or other relevant discipline
• Experience in Electric Utility, 10+ years in operations, engineering and/or compliance; including 2 years focused on NERC, FERC or Cybersecurity (or closely related experience) Nice-to-haves
• MBA or MS in risk, compliance, sciences, engineering or related discipline, or equivalent experience
• Strong program management, project management, internal consulting, change management, and process improvement skills
• Excellent verbal and written communication skills to clearly convey information and ideas to stakeholders at all levels in the organization
• Ability to work independently with guidance on only the most complex issues
• Ability to work closely with functional area representatives as a true partner
• Consistent demonstration of a high level of innovative and new thinking focused on compliance strategy, controls, and implementation
• Advanced knowledge of compliance, risk management and internal controls
• Application of demonstrated knowledge and skill to resolve complex problems
• Ability to identify and implement program and process improvement opportunities, including competency in making sense of complex information to effectively solve problems
• Ability to effectively communicate complex data and findings to diverse audiences using a variety of media and visual management
• Proficient with Microsoft products including Word, Excel, PowerPoint, SharePoint
• Highly flexible, self-directed, and able to adapt well to rapidly changing environment
• Strong client focus
• Certified Information Systems Security Professions (CISSP) or equivalent
• Certified Information Systems Manager (CISM) or eq

Apply tot his job Apply To this Job