IT ComplianceRisk Management Analyst Senior

Arizona Public Service generates reliable affordable and clean energy for 2.7 million Arizonans. Our service territory stretches across the state from the border town of Douglas to the vistas of the Grand Canyon from the solar fields of Gila Bend to the ponderosa pines of Payson. As the states largest and longest-serving energy provider our more than 6000 dedicated employees power our vision of creating a sustainable energy future for Arizona.

Since our founding in 1886 APS has demonstrated a strong commitment to our customers in one of the countrys fastest growing states earning a reputation for customer satisfaction shareholder value operational excellence and business integrity.

Our present and future success depends on the creative and dedicated people of our company who demonstrate the principles outlined in the APS Promise: Design for Tomorrow Empower Each Other and Succeed Together.

Summary

Assess and oversee all technology-related compliance issues across the organization to ensure the development implementation and administration of IT regulatory compliance and licensing this role you will collaborate with I&O departments to identify potential non-compliance issues develop and lead training sessions notify teams of upcoming compliance deadlines and support small and large projects with CIP compliance considerations in mind.

Minimum Requirements

• Bachelors Degree in Information Technology or related field
• PLUS 7 years of prior relevant experience or equivalent combination of education and directly related experience.
• Knowledge of IT federal and state rules and regulations company/business unit operations compliance policies procedures and/or programs in area of assignment.
• One year experience working with one or more of the following in a program development role: Sarbanes Oxley NERC CIP Export Control or HIPAA Skill in effective communication to both technical and non-technical audiences.

Preferred Special Skills Knowledge or Qualifications

• Strong research analytical interpretive and organizational skills are required.
• Manage an overarching calendar of events with consistent results.
• Leading large efforts across multiple business units.
• Proficiency in collaboration spreadsheet word processing graphics and other software applications utilized within area of assignment.
• Demonstrated effective verbal and written communication and interpersonal skills.

Major Accountabilities

1. Lead IT regulatory staff in the development implementation and administration of IT regulatory compliance and licensing programs in area of assignment.
2. Primary responsibility for development and/or administration of one or more regulatory programs which may include policy creation communication compliance and interpretation
3. Initiate coordinate analyze draft and review a variety of documentation such as licensing applications and renewals regulatory requirements and communications compliance governance finding/issue summaries responses and other materials relating to CIP compliance regulations and procedures.
4. Ensure accurate and timely preparation and filing of required licenses and reports to government and regulatory agencies.
5. Coordinate with other departments within the Company to ensure compliance with applicable regulations including identification and oversight of exception situations.
6. Review and provide guidance of department actions to mitigate exceptions and audit implementation success.
7. Evaluate and provide guidance on the impact of regulatory decisions in area of expertise.
8. Direct changes to processes procedures administrative controls and/or documentation to ensure compliance with applicable rules and regulations and maximize program effectiveness.
9. Lead interpretation and advisement on new and changing federal state and other regulatory agencies rules and regulations.
10. Consult with IT and business leaders regarding short- and long-term impact of changes.
11. Develop and deliver training and oversight related to regulatory issues within assigned area. Identify training needs and opportunities and develop program objectives and design.
12. Ensure compliance with applicable laws and regulations by leading the performance of audits and spot checks of existing processes procedures IT systems and associated compliance evidence.
13. Research issues identified through audit process. Implement and/or recommend corrective action.
14. Maintain a high degree of knowledge of appropriate laws and regulations for the assigned area or technical specialty.
15. Represent Company in various industry and governmental forums committees and working groups dealing with regulatory issues.

Key Level Differentiators:
- Analyzes and resolves multi-dimensional technical problems using broad and deep experience and relationships
- Coordinates across diverse stakeholders
- Works on large projects or initiatives
- Supports multiple requests affecting multiple solutions
- Requires outside support to make large decisions within area of direct responsibility

Export Compliance / EEO Statement

This position may require access to and/or use of information subject to control under the Department of Energys Part 810 Regulations (10 CFR Part 810) the Export Administration Regulations (EAR) (15 CFR Parts 730 through 774) or the International Traffic in Arms Regulations (ITAR) (22 CFR Chapter I Subchapter M Part 120) (collectively U.S. Export Control Laws). Therefore some positions may require applicants to be a U.S. person which is defined as a U.S. Citizen a U.S. Lawful Permanent Resident (i.e. Green Card Holder) a Political Asylee or a Refugee under the U.S. Export Control Laws. All applicants will be required to confirm their U.S. person or non-US person status. All information collected in this regard will only be used to ensure compliance with U.S. Export Control Laws and will be used in full compliance with all applicable laws prohibiting discrimination on the basis of national origin and other factors. For positions at Palo Verde Nuclear Generating Stations (PVNGS) all openings will require applicants to be a U.S. person.

Pinnacle West Capital Corporation and its subsidiaries and affiliates (Pinnacle West) maintain a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity in all phases of the employment process and in compliance with applicable federal state and local laws and regulations. This policy of nondiscrimination shall include but not be limited to recruiting hiring promoting compensating reassigning demoting transferring laying off recalling terminating employment and training for all positions without regard to race color religion disability age national origin gender gender identity sexual orientation marital status protected veteran status or any other classification or characteristic protected by law.

For more information on applicable equal employment regulations please refer to EEO is the Law poster. Federal law requires all employers to verify the identity and employment eligibility of every person hired to work in the United States refer to E-Verify poster. View the employee rights and responsibilities under the Family and Medical Leave Act (FMLA).

Arizona Public Service is a smoke free workplace.

CIP Requirement:

This position requires Critical Infrastructure Protection (CIP) access consistent with North American Electric Reliability Corporation (NERC) standards. The applicant considered for this role will be required to obtain and maintain CIP access for the duration of employment in this position. A full seven (7) year criminal history will be obtained through the pre-employment background check process (or for current employees through supplemental background check process) to fulfill the CIP access addition this position requires an additional background check every seven years to maintain access.

Home based: Home based employees primarily work from their home offices and come into an APS facility on an as-needed basis.

• Employees are expected to reside in Arizona (or New Mexico for Four Corners-based employees).
• Working from a home office requires adequate technology and an appropriate ergonomic set up.
• Role types are subject to change based on business need.

Required Experience:

IC