CIP Enforcement Analyst

Job Description

Job Description

POSITION DESCRIPTION

The Critical Infrastructure Protection (CIP) Enforcement Analyst investigates, analyzes, and prepares dispositions for noncompliance of Critical Infrastructure Protection (CIP) NERC Reliability Standards. This person also provides technical expertise in cybersecurity and CIP issues and works with other ERO Enterprise staff, registered entities, and regulators to support a highly reliable and secure North American Bulk Power System.

KEY RESPONSIBILITIES

• Articulate the facts and circumstances, extent, and cause of each noncompliance and ensure the noncompliance disposition ties to the NERC Reliability Standard requirement.
• Assess the risk of each noncompliance and ensure the disposition appropriately and thoroughly describes the risk.
• Review mitigation and / or work with entity to develop mitigation for each noncompliance so that each noncompliance is corrected, and the mitigation prevents recurrence.
• Verify mitigation is completed through a review and documentation of mitigation evidence.
• Review and document the compliance history for each noncompliance.
• Conduct peer reviews of noncompliance dispositions drafted by other staff.
• Communicate with registered entities and the ERO Enterprise as necessary, to investigate CIP noncompliance and issues, and to assure appropriate and informed enforcement actions.
• Triage incoming noncompliance to identify violation facts, preliminary risk assessment, and complexity of the noncompliance.
• Develop risk criteria to evaluate the potential impact and likelihood of impact the noncompliance has on the BPS.
• Ensure confidential information is identified, labeled, stored, and transferred in accordance with NPCC’s procedures for confidential information.
• Ensure information and data placed into various portals, software, and databases are accurate and complete.
• Participate in NPCC and ERO Enterprise meetings, workshops, task forces, committees, and forums, as assigned.
• Assist in developing responses to oversight of NPCC.
• Develop and / or amend policies and procedures.
• Perform other duties as assigned.

EDUCATION AND CERTIFICATION / LICENSE CREDENTIALS

CompTia Security+

FUNCTIONAL COMPETENCIES