Regulatory Compliance Analyst 1, 2, Senior

Summary

The Regulatory Compliance Analyst supports SRP's Compliance Center of Excellence (CCoE), helping standardize workflows, strengthen evidence practices, and build a network of compliance champions across OT environments. This role blends regulatory expertise, technical awareness, and program leadership to improve audit readiness and drive continuous improvement in SRP's overall compliance posture. The Analyst works closely with OT teams, compliance partners, and the CCoE network to align processes, strengthen internal controls, and ensure SRP maintains clear, defensible, architecture aligned compliance positions.

What You'll Do

• Serve as a compliance champion supporting the CCoE's standards, workflows, templates, and evidence pathways.
• Identify compliance gaps and collaborate with technical partners to recommend corrective action or project initiation.
• Define or refine internal controls, documentation expectations, and audit readiness criteria across OT domains.
• Provide consultative guidance that translates regulatory requirements into practical, technically grounded actions.
• Support internal and external audits by developing narratives, preparing evidence, and defending compliance positions.
• Lead continuous improvement initiatives, including maturing SRP's internal controls program and compliance frameworks.
• Monitor regulatory developments and assess their impact on SRP's compliance strategy and operations.
• Mentor and support other analysts and serve as a backup for core CIP compliance functions.
• Contribute to the gradual expansion of compliance oversight to include O&P standards in future phases.
• Build strong relationships with process owners to influence governance, promote accountability, and uphold compliance expectations.
• Travel to SRP facilities as needed to support compliance activities and stakeholder engagement.

Education

Experience

This position may be filled at one of three levels outlined below, based on the candidate’s relevant education, experience, or a combination of both that demonstrates the required knowledge, skills, and competencies.

Level I — Associate: In lieu of a degree, 4 years of relevant experience or an equivalent combination of education and experience totaling 4 years may be considered.
Level 2 – Journey: Minimum 2 years of relevant experience required. In lieu of a degree, 6 years of relevant experience or an equivalent combination of education and experience totaling 6 years may be considered.
Level 3 – Senior: Minimum 5 years of relevant experience required. In lieu of a degree, 9 years of relevant experience or an equivalent combination of education and experience totaling 9 years may be considered.

Eligibility for advancement (progression) to the next level in the same role is based on overall job performance, mastery of all functional responsibilities, and time in position, as assessed by the supervisor.

Additional Requirements and Qualifications

• Strong understanding of NERC CIP standards; familiarity with O&P standards or willingness to build expertise.
• Experience working in or supporting OT environments, infrastructure, cyber security, or electric utility operations.
• Working understanding of core, foundational OT cyber security practices.
• Ability to interpret technical architecture and apply compliance requirements in a practical, defensible way.
• Demonstrated ability to design, implement, and sustain internal controls and governance frameworks.
• Influential communication skills with the ability to guide process owners and collaborate across diverse technical teams.
• Strong analytical, organizational, and problem solving skills with a continuous improvement mindset.
• Ability to manage multiple priorities in a dynamic environment.
• Valid driver's license and willingness to travel to SRP facilities.