CIP Associate

Job Description

Job Description

The Role:

We're looking for a curious, analytically minded recent (or near-future) graduate to join our compliance and cybersecurity consulting team. You'll learn the cyber and physical security standards that govern North American electric utilities — the NERC Critical Infrastructure Protection (CIP) Standards — and help our clients meet these regulatory requirements. You’ll develop and maintain compliance documentation, interpret the standards for novel situations to advise clients, and represent those clients in audit engagements. We work directly with people responsible for keeping the lights on, in the Northeast and all over the US and Canada.

This is a client-facing analyst role, so most of your time will go to compliance work rather than coding. But we're builder friendly: we write automations and use AI to reduce repetitive work, so our time can go to higher-value (and more interesting) challenges. As you grow into the role, you'll have real opportunities to improve how we operate. This is a chance to build expertise in a niche, regulated industry projected for massive growth as the grid modernizes and the data center build-out continues, as well as an opportunity to work on something that genuinely matters: keeping our critical infrastructure secure and reliable.

About Us:

Utility Services is an established compliance and security consulting firm based in Vermont, specializing in helping electric utilities navigate the complex landscape of the NERC reliability standards and improve their cyber and physical security. The electric sector is experiencing unprecedented transformation, and we're looking for someone who wants to grow with us.

Our employees have a hybrid schedule, working remotely 3 days per week and in-person 2 days per week at our office in beautiful Waterbury, Vermont — close to hiking, mountain biking and skiing, and 30 minutes away from Burlington, Vermont’s largest city.

What are the NERC CIP Standards?

The NERC CIP Reliability Standards are mandatory cybersecurity and physical security requirements governing the North American power grid. They were developed after major blackouts revealed vulnerabilities in the power grid, and they apply to electric utilities, power plants, grid operators, and other entities responsible for keeping the lights on. The NERC Reliability Standards cover everything from access controls and incident response to supply chain security and personnel training. Compliance is enforceable; utilities face steep fines for violations, and the standards are constantly evolving to address new technologies and threats.

What You'll Do:

•       Learn NERC CIP reliability standards and evolving electric utility industry needs

•       Participate in client documentation development and calls to understand real-world compliance challenges

•       Analyze compliance documentation with attention to detail and critical thinking

•       Translate complex regulatory requirements into clear, practical guidance for clients

•       Spot inefficiencies in how we work and help build tools to fix them

Who You Are:

•       A recent graduate (or soon-to-be graduate) in Computer Science, Cybersecurity (especially with an interest in Governance, Risk and Compliance), Information Systems, Engineering, or another analytically rigorous field

•       Energized by reading, writing, and client conversations as the core of your day

•       A strong problem-solver with high agency (i.e. able to identify what skills a given problem requires and learn them)

•       Experienced with AI tools, for both coding and non-coding uses

•       A strong writer who can produce clear, precise technical and/or compliance documentation

•       An excellent communicator with an ability to explain technical information in plain language

•       Great with people — able to connect with clients of different backgrounds and expertise, and eager to provide excellent service

•       Insatiably curious across disciplines; comfortable learning about electrical engineering, regulatory frameworks, and business operations

•       Detail-oriented with strong analytical skills

•       Excited about staying in or returning to Vermont

Why This Opportunity:

•       Join a dynamic, growing team where your contributions have immediate impact

•       Develop rare, valuable expertise at the intersection of technology and critical infrastructure

•       Work in an industry with increasing demand

•       Enjoy a builder-friendly culture — if a process annoys you, you're encouraged to automate it

•       Chart your own path as the company and industry grow

•       Build a rare technical career without leaving Vermont

Compensation:

$55,000 - $70,000 to start, with most Associates receiving a performance and readiness gated promotion to Analyst 1 in 6-12 months ($70,000 - $80,000)