NERC CIP Testing Specialist

Job Summary:
We are seeking a highly skilled and detail-oriented NERC CIP Testing Specialist to ensure compliance with the North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) standards. The role involves designing, implementing, and managing test protocols for NERC CIP compliance, focusing on cybersecurity controls for critical infrastructure. The ideal candidate will have in-depth knowledge of NERC CIP standards, testing methodologies, and risk management practices in the energy sector.

Key Responsibilities:

• Design and implement test plans to assess compliance with NERC CIP standards.
• Conduct vulnerability assessments and penetration tests on critical infrastructure systems.
• Develop automated testing frameworks for regular compliance verification.
• Collaborate with cross-functional teams (e.g., IT, security, compliance) to define testing requirements and strategies.
• Document and report test results, highlighting potential compliance gaps and areas of improvement.
• Coordinate with internal teams and external auditors to support NERC CIP audit activities.
• Provide recommendations for remediation of identified risks and ensure follow-up actions are implemented.
• Ensure timely completion of tests in line with regulatory deadlines and requirements.
• Stay up to date with evolving NERC CIP standards and cybersecurity threats.

Required Skills:

• In-depth knowledge of NERC CIP standards and regulatory compliance requirements.
• Strong understanding of cybersecurity principles, including vulnerability assessments and penetration testing.
• Experience in designing and executing test plans for critical infrastructure environments.
• Proficiency in automated testing tools and frameworks.
• Familiarity with energy and utility systems (SCADA, EMS, DMS, etc.).
• Strong analytical, documentation, and reporting skills.
• Ability to communicate effectively with technical and non-technical stakeholders.

Preferred Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• NERC CIP certification or relevant industry certifications (e.g., CISSP, CISA, CISM).
• 3+ years of experience in NERC CIP testing or a related cybersecurity role.
• Hands-on experience with tools such as Nessus, Qualys, or similar.
• Experience working in the energy or utility sector.