The CIP Compliance Analyst is responsible for supporting the organization’s compliance with the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards. This role involves monitoring, assessing, and validating adherence to cybersecurity and physical security requirements for Bulk Electric System (BES) Cyber Systems. The analyst will work closely with internal departments, auditors, third parties and regulatory bodies to maintain a strong compliance posture.
DUTIES AND RESPONSIBILITIES
Monitor and interpret NERC CIP standards and regulatory updates to ensure ongoing compliance.
Assist in the development, implementation, and maintenance of CIP compliance policies, procedures, and controls.
Conduct internal audits, self-assessments, and gap analyses to identify and mitigate compliance risks.
Maintain documentation and evidence to demonstrate compliance activities and audit readiness.
Collaborate with IT, OT, physical security, and operations teams to facilitate compliance with CIP requirements.
Support the preparation and submission of compliance filings, self-certifications, and mitigation plans.
Participate in incident response and recovery efforts related to CIP-reportable events.
Track and manage compliance tasks using governance, risk, and compliance (GRC) tools.
Provide training and awareness on CIP standards and compliance obligations to relevant personnel.
JOB SPECIFICATIONS
Education:
Bachelor’s Degree in Cybersecurity, Information Technology, Engineering, or related field minimum
Experience:
Two years’ experience in regulatory compliance, cybersecurity, or utility operations minimum
Skills and Abilities:
Familiarity with NERC CIP standards and electric utility regulatory environment.
Strong analytical, organizational, and communication skills.
Ability to manage multiple priorities and work independently or in a team.
Experience with audit preparation and regulatory interactions.
Knowledge of SCADA, EMS, or other operational technology systems.
Certifications such as GICSP, CISSP, CISA, or NERC System Operator Certification.
Hoosier Energy is an Equal Opportunity Employer and prohibits discrimination on the basis of race, color, religion, national origin, sex (including pregnancy and gender identity), sexual orientation, age, ancestry, genetic information, disability, veteran status or any other characteristic protected by federal, state or local laws.