Senior Enforcement Mitigation Engineer

Be a Part of Something that Matters

At WECC, we enhance the lives of 80 million people by identifying and mitigating risks to the bulk power system in the West. We are seeking a Senior Enforcement Staff Mitigation Engineer to help us further our mission and achieve our business goals.

As a Senior Enforcement Staff Mitigation Engineer, you’ll work to resolve risks to the Bulk Power System (BPS) associated with the noncompliance of NERC CIP Reliability Standards and Requirements.

The Senior Enforcement Staff Mitigation Engineer collaborates with WECC Enforcement Attorneys and analyzes the facts and circumstances associated with potential noncompliance to determine the risk to the reliability and security of the BPS. This person also works with registered entities (electric utilities) to implement mitigation plans to remediate the noncompliance and prevent recurrence.

The Senior Enforcement Staff Engineer serves as a subject matter expert to other WECC departments and registered entities, and delivers presentations at workshops, webinars, and conferences about the application of CIP Standards to transmission facilities, generation facilities, and control center operations. 

As a Senior Enforcement Staff Mitigation Engineer, you will make a difference by ensuring risks to the reliability of the Western interconnection, posed by violations of the NERC Reliability Standards, are successfully documented and mitigated. 

You will—

•  Apply technical knowledge to evaluate the data and circumstances for possible noncompliance to determine the risk presented to the reliability and security of the BPS. 
•  Work with Enforcement Attorneys to investigate facts and circumstances regarding noncompliance of NERC CIP Reliability Standards.  
•  Review Root Cause analysis reports as well as Extent of Condition evidence provided by evidence in support of noncompliance investigations.  
•  Work directly with registered entities to collect information to support analyses and to develop mitigation plans. 
•  Review and validate completion of mitigation plans submitted by registered entities. 
•  Review reports of noncompliance with CIP requirements from an enforcement perspective. 
•  Help develop outreach materials to help registered entities implement CIP requirements. 
• Occasionally perform other duties related to the Compliance Monitoring and Enforcement Program (CMEP) as assigned or required and coordinate with standards drafting teams on improvements to standards. 

You will enjoy this role if you have—

•  A bachelor’s degree in engineering, computer security, information systems, or a related field, and related industry experience resulting in a demonstrated ability to perform the job duties.
•  Five or more years of relevant industry experience in at least two or more of the following topics, even if that experience is from another field: 
  •  CIP-002-5.1a BES Cyber System Categorization,
  •  CIP-003-8 Security Management Controls,
  •  CIP-004-6 Personnel and Training, 
  •  CIP-005-6 Electronic Security Perimeter(s), 
  •  CIP-006-6 Physical Security of BES Cyber-Systems,
  •  CIP-007-6 System Security Management, 
  •  CIP-008-6 Incident Reporting and Response Planning,
  •  CIP-009-6 Recovery Plans for BES Cyber-Systems, 
  •  CIP-010-3 Configuration Change Management and Vulnerability Assessments, 
  •  CIP-011-2 Information Protection,
  •  CIP-013-1 Supply Chain Risk Management, and
  •  CIP-014-2 Physical Security. 
•  The ability to—
  •  Carry out a wide range of complex analyses, reports, and investigations concerning operations and maintenance of the BPS, 
  •  Present research, findings, and recommendations, both orally and in writing, to a diverse audience of technical and non-technical professionals, 
  •  Give clear, comprehensive reports and present findings and recommendations to a diverse audience of professionals, and 
  •  Work effectively in teams.  
• An understanding of the Compliance Monitoring and Enforcement processes, including risk assessments, monitoring, and enforcement processes;
• A knowledge of NERC compliance standards and monitoring or implementation of these standards;
• A knowledge of the electric industry, electric power generation, transmission, and power system reliability;
• Industry certifications such as PMP, CIA, CGAP, PE, and CRM;
• A knowledge of the business and operational functions of an electric utility and familiarity with the risks and controls of these functions; and
• A knowledge of operational risk management and operational process mapping.

At WECC we—

• Seek information and ask for help,
• Are accountable,
• Embrace the challenges and rewards of change,
• Treat everyone as a colleague,
• Pursue continuous learning, and
• Focus on results over completing activities.

Benefits and Compensation

The base salary range for this full-time position is $92,186–$122,915 + discretionary pay + benefits. Our salary ranges are determined by role and level. The range displayed on each job posting reflects the minimum and maximum for the position across all locations. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Your recruiter will share more details during the hiring process.

WECC offers an excellent benefits package including medical, dental, vision, life insurance, health reimbursement and flexible spending accounts, a 401(k) plan, and generous paid personal time.

Our Commitment to Diversity, Equity, and Inclusion

A diverse, equitable, and inclusive workforce, where everyone has an equal opportunity to thrive, is fundamental to accomplishing our critical reliability and security mission.

We foster an organizational culture that values the visible and invisible qualities that make individuals who they are. When individuals bring their whole selves to work, without apprehension, we, as WECC, will meet our mission now and in the future.

***

Be a part of something that matters!