Security and Compliance Consultant (OT Regulatory Compliance)

The Security and Compliance Consultant within Enterprise Security Services (ESS) is responsible for the governance, execution, and continuous improvement of OT regulatory compliance programs aligned with NERC CIP and TSA security directives, ensuring effective management of regulatory obligations through internal controls, compliance assessments, evidence management, audit readiness, and continuous monitoring. This role provides expert guidance to business units, application owners, and technology teams to drive alignment with regulatory requirements, strengthen control effectiveness, and reduce compliance risk while establishing clear ownership, standardized processes, and meaningful metrics that deliver leadership visibility into control performance, audit readiness, and remediation progress. Additionally, the position maintains and enhances ESS policies, procedures, tools (e.g., Archer eGRC platform), and processes to enable sustainable, defensible compliance practices and support effective responses to audits, inspections, and regulatory inquiries.

Essential Responsibilities

• Operations Management: Lead and execute OT compliance programs across NERC CIP and TSA requirements, including internal controls, assessments, and audit readiness. Identify and mitigate compliance risks through data analysis, control performance, and audit insights while ensuring accuracy and integrity of compliance evidence and reporting.

• Process Management: Design, operate, and continuously improve standardized compliance processes and tools (e.g., Archer) supporting evidence management, control execution, and regulatory reporting. Ensure processes are sustainable, traceable, and audit-defensible while driving efficiency and incorporating regulatory guidance and lessons learned.

• Training / Communications: Deliver targeted training and guidance to stakeholders to ensure clear understanding of compliance responsibilities, regulatory requirements, and ESS processes. Develop and track metrics and KPIs to measure control effectiveness, audit readiness, and overall program maturity.

• Relationship Management: Serve as a primary compliance liaison across ESS, Technology Services, Transmission, and Generation, and coordinate with auditors and regulators. Drive accountability, clarify ownership, and incorporate stakeholder feedback to enhance compliance processes, tools, and governance practices.

Minimum requirements:

• Bachelor's degree in technology, Science, Business or related field, or 4 years of experience equivalent to the position.
• Seven years of related functional experience.
• At least 2 years of experience using project management tools, techniques and communication processes, or equivalent demonstrated knowledge and skills.
• Experience in IT, Supply Chain or Security. Demonstrated experience in project management activities.
• Expertise in NERC and TSA policy and regulation compliance.
• Demonstrated ability to work in a diverse, regulated and rapidly changing business environment.
• Previous management of core business processes with proven ability to learn processes and cut waste and continuously improve solutions.
• Excellent communication skills, effective with varying organizational levels and skill set, and able to translate between technical and non-technical concepts.
• Excellent Relationship Management and collaboration skills, with a track record of working as one team cross-organizationally to drive innovation and business results.
• Demonstrated proficiency using Archer eGRC platform strong preferred.