Cybersecurity Project Manager

Compliance Program Manager

Program and Project Management

• Experience managing complex compliance or infrastructure projects involving multiple business functions.
• Strong project planning, schedule management, issue management, and executive reporting capabilities.
• Ability to manage competing priorities across technical, operational, cybersecurity, and compliance teams.

Control Center and Asset Commissioning Experience

• Experience supporting Control Center construction, migration, certification, or operational readiness initiatives.
• Understanding of OT cybersecurity and utility operational environments.

Compliance Documentation and Evidence Management

• Ability to interpret regulatory requirements and translate them into actionable project deliverables and controls.
• Strong documentation, facilitation, and stakeholder management skills.

Nice to Have

NERC Compliance Expertise

• Knowledge of NERC CIP Reliability Standards and NERC 693 requirements.
• Utility transmission or electric operations experience
• PMP certification
• Archer Experience
• Experience with Critical Infrastructure Protection programs
• Experience commissioning BES Cyber Systems, substations, generation assets, transmission assets, or operational technology (OT) environments.

Responsibilities

This role will support NIPSCO’s regulatory compliance and operational readiness initiatives associated with the certification and commissioning of a new Control Center, establishment of a new Physical Security Perimeter (PSP), and onboarding of new Bulk Electric System (BES) Cyber Systems and assets into production operations.

The Compliance Program Manager will coordinate all NERC CIP and NERC 693 regulatory activities required to achieve compliance readiness prior to facility go live, operational turnover, and audit scrutiny.

This includes managing compliance workstreams across various groups including but not limited to; Cybersecurity, Operational Technology, Physical Security, Communication & Control, Facilities, and Compliance teams.

The individual will serve as the primary point of coordination between project stakeholders and compliance subject matter experts to ensure all regulatory requirements are addressed, documented, tested, and validated before commissioning.

Typical responsibilities may include:

• Lead NERC CIP and NERC 693 compliance activities for a new Control Center implementation, including project planning, milestone tracking, risk management, and regulatory readiness.
• Coordinate certification and commissioning activities for new BES Cyber Systems, Electronic Security Perimeters (ESP), Physical Security Perimeters (PSP), Electronic Access Control and Monitoring Systems (EACMS), Physical Access Control Systems (PACS), and Protected Cyber Assets (PCA).
• Ensure compliance requirements are incorporated into design, build, testing, commissioning, and operational turnover activities.
• Develop and manage compliance readiness plans, evidence repositories, audit packages, and transition documentation.
• Facilitate compliance reviews and validation of controls associated with CIP-002 through CIP-013 and applicable NERC 693 Reliability Standards.
• Partner with stakeholders to validate implementation of required controls.
• Track and manage compliance risks, action items, deficiencies, and project dependencies.
• Ensure all required compliance evidence is developed, retained, and organized in accordance with NERC record retention requirements.
• Facilitate operational turnover and sustainment planning to ensure compliance ownership transitions successfully to ongoing operations teams.