CIP Compliance Program Manager (Remote)

SOLV Energy is an engineering, procurement, construction (EPC) and solar services provider for utility solar, high voltage substation and energy storage markets across North America.

Job Description Summary:
The Compliance Program Manager will be a key figure in planning and coordinating the organization's NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) program and oversee general cybersecurity compliance initiatives.

The program manager will be responsible for leading and managing comprehensive audits and risk assessments to evaluate the effectiveness of the organization's controls and compliance measures.

Job Description:



*This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned.

Position Responsibilities and Duties:


* Independently drive end-to-end planning, coordination, and execution of SOLV Energy's compliance programs, supporting monitoring and internal controls activities.


* Lead and manage the NERC CIP compliance program, ensuring adherence to all regulatory requirements.

Manage day-to-day activities related to NERC CIP Medium Impact program.


* Develop, implement, and maintain policies, procedures, and controls to ensure compliance with NERC CIP, SOX, NIST, and other cybersecurity standards.


* Conduct regular risk assessments and audits to identify potential compliance issues and recommend corrective actions.


* Lead self-reports, mitigation plan and self-certification submittal processes.


* Collaborate with internal and external stakeholders to ensure compliance with regulatory requirements and industry best practices.


* Monitor and report on compliance metrics, providing regular updates to senior management.


* Stay current with changes in regulatory requirements and industry trends and adjust compliance programs accordingly.


* Provide training and guidance to employees on compliance-related matters.


* Manage and respond to regulatory inquiries and audits.


* Develop and maintain documentation related to compliance activities and findings.

Minimum Skills or Experience Requirements:


* Bachelor's degree in Information Technology, Information Security, Cybersecurity or related field and/or equivalent experience


* 4+ years of experience in compliance management, preferably with a focus on cybersecurity and NERC CIP


* In-depth knowledge of regulatory standards such as NERC CIP, SOX, NIST, and other relevant frameworks.


* Strong technical acumen with physical security, network infrastructure, security related tooling, industrial control systems and operational technology network infrastructure.


* Proven experience in cybersecurity compliance, risk management, and audit processes.


* Strong project management skills, with the ability to manage multiple projects simultaneously.


* Strong knowledge of regulatory requirement...