Physical Security Compliance Specialist - Corporate Security

About the Opportunity

The selected candidate may be offered a position within the same job family, at a level that is lower than what was posted. This will be determined based upon the results of the interview process which considers the candidate's skills, work history, experience level, and other relevant qualifications.

THIS POSITION IS ON-SITE WITHIN THE FE FOOTPRINT

The position reports to the Supervisor, Physical Security Compliance.

About the Opportunity:

Physical Security Compliance provides the operational and governance support for corporatewide security, physical security CIP compliance and Business Continuity Management for FirstEnergy personnel and assets.

This responsibility includes the governance and development of CIP policies, procedures and controls related to physical security as well as governance and oversight coordination of the Corporate Business Continuity Management program at FirstEnergy.

Physical Security Compliance is responsible for the issuance of identification badges to both employees and contractors throughout the FE footprint, access administration, and access reporting.

Physical Security Compliance Specialist - Responsibilities include:

Develop, support, and implement the ongoing strategy of the FE physical security compliance programs to meet company, state, and federal regulatory requirements (NERC, NRC, PJM, TSA, etc.)

Ensure effective regulatory compliance to the North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards by providing guidance to support and enhance physical security programs

Develop and maintain FE compliance policies, programs, procedures, and guidelines related to the NERC CIP Standards

Develop and maintain Corporate Security policies consistent with physical security best practices

Develop and maintain Reliability Standard Audit Worksheets (RSAW), evidence documentation, and basis of compliance certifications for each NERC CIP Standard that is owned by or applies to Physical Security

Support state based physical security regulatory requirements

Prepare, coordinate and support compliance audits conducted by internal resources, consultants, or regulatory organizations such as RF, PJM, NERC, FERC, TSA, and state agencies

Serve as a physical security representative for all audits, audit investigations, and planning teams for potential compliance concerns

Conduct compliance investigations and document root cause analysis regarding potential violations and ensure they are tracked for timely resolution and fully documented in auditable records

Utilize FE technology (RAAD, Pro-Watch, Salto, ITNow, CATSWeb, Content Navigator, Empower, SharePoint) to assign, track, and monitor compliance efforts

Manage the regulatory required maintenance and testing program

Manage the regulatory required visitor control program

Manage required training such as CIP training and Physical Security Awareness Training

Conduct research and interpret regulatory standards and policies to ensure Corporate Security business practices align with compliance requirements

Participate in compliance champion meetings, CIP change meetings, and internal and external planning and development meetings, such as CIP Core Team, CIPC, NERC Reviews, Peer Reviews, and NATF Forum

Conduct internal assessments to ensure implemented compliance programs satisfactorily meet regulatory requirements

Develop and conduct assessments related to Security Operations Center (SOC) operations to ensure they operate in compliance with regulatory requirements, as well as company policies and procedures

Provide subject matter expert support to contract labor

Serve as a Speak Up resource

Qualifications at the Physical Security Compliance Specialist IV include:

Bachelor's degree in Business Administration, or related field preferred with a recommended minimum of 7 years professional work experience. Must have a demonstrated working knowledge of compliance related to NERC CIP standards

Must be able to successfully complete a background investigation to obtain CIP access

Knowledge of physical security compliance controls, regulatory matters, and business applications preferred

Ability to make accurate decisions and demonstrate sound judgment

Proven ability to develop programs, training, policies, procedures, reports, and mitigation plans

Ability to write and follow work plans

Proficient in Microsoft Office applications

Exceptional teamwork and interpersonal skills to aid in the resolution of compliance issues

Strong organizational skills for planning, developing, and performing assessments and coordinating resolution of compliance issues

Flexibility to travel which could include overnight stays

Teamwork, communication, and innovation are essential, as well as taking independent initiative on tasks to be completed

Excellent communication skills to effectively annotate findings in both written and verbal form

Ability to write at a professional level to ensure a consistent understanding of the subject matter across multiple knowledge levels

Certification as a Physical Security Professional (PSP), Certified Protection Professional (CPP), Pro-Watch Badge Administrator, or equivalent professional certification required

FirstEnergy internal Compliance Champion certification required within 6 months of assignment

Bachelor's degree in Business Administration or related field with a recommended minimum of 10 years professional work experience. Must have demonstrated strong performance

Must work at a higher level of responsibility with greater self-direction

Considered a subject matter expert

Qualifications at the Physical Security Compliance Specialist V include all of the above, plus:

Bachelor's degree in Business Administration or related field with a recommended minimum of 10 years professional work experience. Must have demonstrated strong performance

Must work at a higher level of responsibility with greater self-direction

Considered a subject matter expert