Compliance and Operations Analyst

Primary Functions:

The Compliance and Operations Analyst supports the daily operation, security, and compliance of the organization's Transmission Management System (TMS) environment, ensuring adherence to applicable NERC Critical Infrastructure Protection (CIP) standards and internal security protocols. This role is responsible for developing, maintaining, and improving NERC CIP policies, plans, procedures, and supporting documentation, as well as coordinating compliance activities across technical and business teams.

The analyst works closely with Operations, Security, Engineering, and Compliance stakeholders to identify risks, implement controls, and drive operational and process improvements that enhance system reliability, security, and regulatory compliance. The position plays a key role in facilitating change management activities by ensuring that operational changes are evaluated, implemented, and documented in a secure and compliant manner while supporting continuous improvement initiatives across the TMS environment.

Responsibilities:

Support daily operational activities within the TMS environment.

Maintain and enhance NERC CIP compliance documentation, including policies, plans, procedures, and evidence repositories.

Monitor and support compliance with applicable NERC CIP, regulatory, and cybersecurity requirements.

Analyze operational and compliance processes and drive continuous improvement initiatives that enhance efficiency, standardization, risk reduction, and regulatory readiness.

Partner with Operations, Cybersecurity, and business stakeholders to plan, review, and implement changes in a secure, reliable, and compliant manner.

Support vulnerability management, patch management, and baseline configuration monitoring activities.

Communicate effectively as a liaison between technical teams, program management, project sponsors, and business stakeholders.

Ensure cybersecurity and compliance controls remain effective and aligned with regulatory and organizational requirements.

Assist with internal and external audits, including compliance evidence management and audit support activities.

Key Qualifications:

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Computer Science, Business, or a related field; equivalent experience may be considered.

5+ years of experience supporting regulated operational technology (OT), transmission operations, cybersecurity, compliance, or related utility environments.

Knowledge of NERC Critical Infrastructure Protection (CIP) standards and their application within electric utility environments.

Experience developing, maintaining, and managing policies, plans, procedures, standards, and compliance documentation.

Understanding of Transmission Management Systems (TMS), Energy Management Systems (EMS), Operational Technology (OT), or other critical infrastructure environments.

Familiarity with cybersecurity principles, including vulnerability management, patch management, access management, and configuration management.

Strong analytical and problem-solving skills with the ability to identify risks, compliance gaps, and process improvement opportunities.

Demonstrated ability to manage multiple priorities and deliver results in a fast-paced, highly regulated environment.

Experience coordinating activities across technical teams, compliance personnel, business stakeholders, and leadership.

Excellent written and verbal communication skills, including the ability to translate complex technical concepts into business-focused communications.

Knowledge of change management processes and the ability to support secure and compliant implementation of operational changes.

Strong organizational skills with attention to detail and accuracy in documentation and recordkeeping.

Ability to work independently while effectively collaborating within cross-functional teams.

Measurements:

Maintains a high level of client satisfaction and builds positive effective relationships with clients and related stakeholders

Effective actions taken to minimize risk

A track record of collaborative participation in the management of technology platforms

Compliance with applicable NERC CIP, FAA, FCC, etc. regulations

Effective documentation and communication of project milestones, risks, issues, deliverables, escalations, etc.