IT Compliance/Risk Management Analyst Senior

Arizona Public Service generates reliable, affordable and clean energy for 2.7 million Arizonans. Our service territory stretches across the state, from the border town of Douglas to the vistas of the Grand Canyon, from the solar fields of Gila Bend to the ponderosa pines of Payson. As the state’s largest and longest-serving energy provider, our more than 6,000 dedicated employees power our vision of creating a sustainable energy future for Arizona.

Since our founding in 1886, APS has demonstrated a strong commitment to our customers in one of the country’s fastest growing states, earning a reputation for customer satisfaction, shareholder value, operational excellence and business integrity.

Our present and future success depends on the creative and dedicated people of our company who demonstrate the principles outlined in the APS Promise: Design for Tomorrow, Empower Each Other and Succeed Together.

Summary

Assess and oversee all technology-related compliance issues across the organization to ensure the development, implementation, and administration of IT regulatory compliance and licensing programs. In this role, you will collaborate with I&O departments to identify potential non-compliance issues, develop and lead training sessions, notify teams of upcoming compliance deadlines, and support small and large projects with CIP compliance considerations in mind.

Minimum Requirements

• Bachelor's Degree in Information Technology or related field
• PLUS 7 years of prior relevant experience or equivalent combination of education and directly related experience.
• Knowledge of IT, federal and state rules and regulations, company/business unit operations, compliance policies, procedures, and/or programs in area of assignment.
• One year experience working with one or more of the following in a program development role: Sarbanes Oxley, NERC CIP, Export Control, or HIPAA Skill in effective communication to both technical and non-technical audiences.

Preferred Special Skills, Knowledge or Qualifications

• Strong research, analytical, interpretive and organizational skills are required.
• Manage an overarching calendar of events with consistent results.
• Leading large efforts across multiple business units.
• Proficiency in collaboration, spreadsheet, word processing, graphics, and other software applications utilized within area of assignment.
• Demonstrated effective verbal and written communication and interpersonal skills.

Major Accountabilities

1. Lead IT regulatory staff in the development, implementation and administration of IT regulatory compliance and licensing programs in area of assignment.
2. Primary responsibility for development and/or administration of one or more regulatory programs which may include policy creation, communication, compliance and interpretation
3. Initiate, coordinate, analyze, draft, and review a variety of documentation such as licensing applications and renewals, regulatory requirements and communications, compliance governance, finding/issue summaries, responses, and other materials relating to CIP compliance regulations and procedures.
4. Ensure accurate and timely preparation and filing of required licenses and reports to government and regulatory agencies.
5. Coordinate with other departments within the Company to ensure compliance with applicable regulations, including identification and oversight of exception situations.
6. Review and provide guidance of department actions to mitigate exceptions and audit implementation success.
7. Evaluate and provide guidance on the impact of regulatory decisions in area of expertise.
8. Direct changes to processes, procedures, administrative controls, and/or documentation to ensure compliance with applicable rules and regulations and maximize program effectiveness.
9. Lead interpretation and advisement on new and changing federal, state, and other regulatory agencies' rules and regulations.
10. Consult with IT and business leaders regarding short- and long-term impact of changes.
11. Develop and deliver training and oversight related to regulatory issues within assigned area. Identify training needs and opportunities and develop program objectives and design.
12. Ensure compliance with applicable laws and regulations by leading the performance of audits and spot checks of existing processes, procedures, IT systems, and associated compliance evidence.
13. Research issues identified through audit process. Implement and/or recommend corrective action.
14. Maintain a high degree of knowledge of appropriate laws and regulations for the assigned area or technical specialty.
15. Represent Company in various industry and governmental forums, committees, and working groups dealing with regulatory issues.

Key Level Differentiators:
- Analyzes and resolves multi-dimensional technical problems using broad and deep experience and relationships
- Coordinates across diverse stakeholders
- Works on large projects or initiatives
- Supports multiple requests affecting multiple solutions
- Requires outside support to make large decisions within area of direct responsibility

Export Compliance / EEO Statement

This position may require access to and/or use of information subject to control under the Department of Energy's Part 810 Regulations (10 CFR Part 810), the Export Administration Regulations (EAR) (15 CFR Parts 730 through 774), or the International Traffic in Arms Regulations (ITAR) (22 CFR Chapter I, Subchapter M Part 120) (collectively, 'U.S. Export Control Laws'). Therefore, some positions may require applicants to be a U.S. person, which is defined as a U.S. Citizen, a U.S. Lawful Permanent Resident (i.e. 'Green Card Holder'), a Political Asylee, or a Refugee under the U.S. Export Control Laws. All applicants will be required to confirm their U.S. person or non-US person status. All information collected in this regard will only be used to ensure compliance with U.S. Export Control Laws, and will be used in full compliance with all applicable laws prohibiting discrimination on the basis of national origin and other factors. For positions at Palo Verde Nuclear Generating Stations (PVNGS) all openings will require applicants to be a U.S. person.

Pinnacle West Capital Corporation and its subsidiaries and affiliates ('Pinnacle West') maintain a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity in all phases of the employment process and in compliance with applicable federal, state, and local laws and regulations. This policy of nondiscrimination shall include, but not be limited to, recruiting, hiring, promoting, compensating, reassigning, demoting, transferring, laying off, recalling, terminating employment, and training for all positions without regard to race, color, religion, disability, age, national origin, gender, gender identity, sexual orientation, marital status, protected veteran status, or any other classification or characteristic protected by law.

For more information on applicable equal employment regulations, please refer to EEO is the Law poster. Federal law requires all employers to verify the identity and employment eligibility of every person hired to work in the United States, refer to E-Verify poster. View the employee rights and responsibilities under the Family and Medical Leave Act (FMLA).

Arizona Public Service is a smoke free workplace.

CIP Requirement:

This position requires Critical Infrastructure Protection (CIP) access consistent with North American Electric Reliability Corporation (NERC) standards. The applicant considered for this role will be required to obtain and maintain CIP access for the duration of employment in this position. A full seven (7) year criminal history will be obtained through the pre-employment background check process (or, for current employees, through supplemental background check process) to fulfill the CIP access requirements. In addition, this position requires an additional background check every seven years to maintain access.

Home based: Home based employees primarily work from their home offices and come into an APS facility on an as-needed basis.

• Employees are expected to reside in Arizona (or New Mexico for Four Corners-based employees).
• Working from a home office requires adequate technology and an appropriate ergonomic set up.
• Role types are subject to change based on business need.