Physical Security Compliance Consultant

Compensation: 70-100/hr



Key Responsibilities

• Serve as a subject matter expert (SME) for NERC CIP-006, ensuring compliance with applicable standards and audit requirements.
• Conduct physical security risk assessments for BES Cyber Systems and critical facilities, including substations, control rooms, data centers, and generation sites.
• Design, review, and validate physical security controls, including:
  • Perimeter security (fencing, barriers, gates)
  • Access control systems (badging, biometrics)
  • Video surveillance (CCTV, monitoring, retention)
  • Intrusion detection and alarm systems
• Develop and maintain physical security plans, procedures, and evidence required for NERC audits.
• Support NERC compliance audits, self-certifications, spot checks, and mitigation activities.
• Collaborate with cybersecurity, operations, engineering, and facilities teams to align physical and cyber security requirements.
• Evaluate third-party/vendor physical security solutions for compliance and operational fit.
• Provide guidance on incident response, access management, and physical security monitoring.
• Stay current on NERC standards, regulatory updates, and industry best practices in critical infrastructure protection.

• 5+ years of experience in physical security within the energy sector (electric utility, power generation, transmission, or energy infrastructure).
• Direct, hands-on experience with NERC CIP-006, including implementation and audit support.
• Strong understanding of NERC CIP standards and their application to BES environments.
• Experience performing physical security assessments at operational energy facilities.
• Knowledge of access control systems, CCTV, alarms, and perimeter security technologies.
• Experience working in regulated environments with formal compliance and documentation requirements.
• Ability to work independently and consult with both technical and non-technical stakeholders.

• Experience with additional NERC CIP standards (e.g., CIP-005, CIP-007, CIP-010, CIP-011).
• Background in substation security, control center security, or generation plant security.
• Certifications such as:
  • CPP (Certified Protection Professional)
  • PSP (Physical Security Professional)
  • CISSP or other security-related certifications
• Experience supporting incident investigations or regulatory findings remediation.
• Familiarity with DOE, TSA, or DHS critical infrastructure guidance.