Sr. Gas Operations Compliance Specialist Ensure Exelon Utilities adheres to Operational Technology Security Governance program (OTSGP) as well as TSA (Transportation Security Administration) Cyber Security compliance directives for identified OT field devices. Ensure that Exelon Utility activities are performed in compliance with utility procedures, standards and requirements. Identify and provide recommendations for continuous improvement initiatives by developing and implementing internal assessments. Participate and support Exelon Corporation compliance program and provide oversight for the line Organization. Serve as the business unit point of contact for OTSGP and TSA related compliance and regulatory activities.
Note:
This position may be required to work extended hours, including 24x7 coverage for storms and other energy delivery emergencies.
Primary Duties:
Responsible for the evaluation, tracking and reporting of Exelon Utilities compliance programs associated with cyber security for process control devices such as OTSGP (Operational Technology Security Governance program) and TSA (Transportation Security Administration) Cyber Security compliance directive as well as pipeline related compliance programs such as DOT, PHMSA and PSC.Perform an annual self assessment for each standard that Exelon Utilities is required to comply with, based upon each program's controls and directives. This will involve setting up kick off and challenge meetings with the appropriate subject matter experts, (SMEs) their Key Managers and assimilating all information with appropriate signoffs. All documents shall be posted to an evidence/artifact storage location. Evaluate, determine, and report utility compliance to Exelon Utility procedures, standards and requirements. Recommend enhancements to current practices and procedures to drive continuous improvement as well as a Culture of Compliance within the business unit. Responsible for creating mitigation plans and monitoring progress through action tracking and timely updates on each. Ensure necessary work activities for the OTSGP as well as TSA (Transportation Security Administration) Cyber Security directive compliance are initiated in the Work Management system, executed using procedures and tracked in systems with documented completion evidence. Provide analysis and support to leadership for the OTSGP as well as TSA (Transportation Security Administration) Cyber Security directive compliance program including ongoing reporting of performance improvements, organizational initiatives and compliance related communications. Build and maintain knowledge of current Cyber Security controls and directives Impacting Gas OT systems and devices as defined in the OT Security Governance program as well as the TSA compliance directives. Lead/participate in compliance audits. Plan, prepare and execute audit tasks and support audit teams. Compiles and creates evidence packages in preparation for audit activities. Represent Exelon Utilities on select committees to facilitate benchmarking and continuous improvement. Participate in standards review processes. Job ScopeThe Sr. Gas Operations Compliance Specialist evaluates and determines compliance for Exelon Utilities activities, will recommend corrective actions and assist in the development procedures to address inadequacies that are discovered during assessments, including recommendations that are administrative or functional in nature. Will typically involve acting in a consulting or advisory capacity and gather commitments of other management personnel in the organization as well as collaborate with other OpCo's for consistency and alignment within cyber programs. The Sr. Gas Operations Compliance Specialist acts as liaison to the OTSGP Exelon team and the TSA for compliance issues, tracks OTSGP and TSA activities and consults/advises key Exelon personnel in order to develop strategic direction for compliance to OTSGP and TSA standards. The Sr. Gas Operations Compliance Specialist generally operates with wide latitude on action and decision-making.
Minimum Qualifications:
Bachelor's Degree in Computer Science, Business Administration, Engineering or related field and 5-8 years experience working in any combination of gas operations, regulatory, legal or financial disciplines. OR in lieu of a bachelor's degree, a minimum of 9-12 years of relevant business experience. Ability to analyze, interpret, and determine compliance requirements associated with Operational Technology Security Governance program (OTSGP) as well as TSA (Transportation Security Administration) Cyber Security compliance directives and ability to apply problem solving approaches. Knowledge and use of computer systems and applications with Word/Access/Excel/PowerPoint/Passport. Along with excellent written, oral communication and analytical skills.
Preferred Qualifications:
Degree in Computer Science, Business, Engineering or related field knowledge and experience with utility regulations, guides, standards, codes, methods, practices, engineering principles. Knowledge of process control systems and incorporation of Management of Change practices into cyber compliance programs.
