NERC CIP Remediation Analyst

DescriptionDragonfli Group seeks a NERC CIP Remediation Analyst to deliver hands-on remediation execution in direct coordination with a seasoned audit readiness team supporting a large municipal utility enterprise preparing for a Western Electricity Coordinating Council (WECC) compliance audit.This is a keyboard-level execution role. The analyst will work alongside advisory leads responsible for audit preparation, gap assessment, and mock audit facilitation. The remediation analysts own the execution layer: closing identified gaps, implementing controls, and building the evidence record across CIP-003 through CIP-013.ResponsibilitiesExecute hands-on remediation tasks across NERC CIP standards CIP-003 through CIP-013 as directed by the audit readiness leadImplement technical and procedural controls to close compliance gaps identified through gap assessments and mock audit findingsCompile, organize, and QA/QC compliance evidence packages in support of WECC audit submissionDocument remediation activities, control test results, and closure evidence with precisionCoordinate with internal IT, OT, and compliance staff to validate remediation completion across technical and regulatory domainsSupport cyber asset identification, BES Cyber System categorization, and control implementation activitiesMaintain detailed work logs in support of T&M billing and audit trail requirementsEscalate blockers and risks to engagement lead without delayRequirementsRequired Qualifications3+ years of direct NERC CIP compliance or remediation experienceHands-on familiarity with CIP-003 through CIP-013 standardsDemonstrated execution experience: implementing controls, building evidence, closing findings. Advisory-only profiles will not be consideredExperience working within OT/ICS environmentsStrong documentation discipline; evidence collection and control validation requiredWECC regional experience preferredPreferred QualificationsPrior municipal or investor-owned utility client experienceFamiliarity with WECC audit process, Data Requests, and audit communication protocolsNERC CIP certification or equivalent industry credentialBenefitsInsurance - health, dental, and visionPTO & Holidays (Paid)401(k), employer matchOriginally posted on Himalayas