Senior Consultant - NERC CIP SME
Role details
Job location
Tech stack
Job description
- Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data.
- Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance.
- Implement NERC CIP standards (002-013), including audit preparation, evidence gathering, and mitigation planning.
- Secure data flows across AWS, Azure, and on-prem environments using encryption, IAM, and network segmentation.
- Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations
- Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
- Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
- Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
- Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.
Requirements
We are seeking a highly skilled professional to design and implement secure, compliant architectures for enterprise and operational environments. This role requires deep expertise in regulatory frameworks, cybersecurity best practices, and advanced data architecture., * Due to nature of client engagements must be a US Permanent Resident or US Citizen
- Bachelor's degree from an accredited university/college
- Minimum of THREE (3) years post-graduation working experience within the electric utility industry or a NERC related regulator.
- Work experience for all levels must be an emphasis on North American NERC Reliability Standards (USA and/or Canada) supporting regulatory framework and processes around NERC Critical Infrastructure Protection (CIP) and Regional Entities.
- Experience in designing enterprise data models, data lakes, warehouses, and integration frameworks using structured and unstructured data.
- Deep understanding of NIST, ISO 27001, and CIS controls to architect secure systems and enforce security compliance.
- In-depth knowledge of implementing NERC CIP standards (002-013), audit preparation, evidence gathering, and mitigation planning.
- Proficient in securing data flows across AWS, Azure, and on-prem environments with encryption, IAM, and network segmentation.
- Designs and implements RBAC, ABAC, MFA, and privileged access management aligned with CIP-007 and CIP-005 requirements.
- Ability to design secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
- Familiar with securing OT environment such EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
- Ensures integrity, availability, and confidentiality of data through metadata standards, classification, retention, and purging policies.
- Strong writing skills for creating security architecture diagrams, CIP evidence packages, procedures, and training materials.
- Works effectively with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.
- Ability to travel to include potential international as needed.
- Ability to work onsite in a Guidehouse Office or Client Office location.
- Currently reside in the contiguous United States.
What Would Be Nice To Have:
- Preference will be given to candidates within reasonable driving distance of listed core Guidehouse Office or Client Office Location.
- Specific working experience related to any of the following:
- Bulk Electric System (BES) and power systems
- Electrical Reliability
- NERC/FERC Enforcement or Auditing
Benefits & conditions
Pulled from the full job description
- Referral program
- Tuition reimbursement
- Parental leave
- 401(k)
- Health insurance
- Vision insurance
- Health savings account, Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:
- Medical, Rx, Dental & Vision Insurance
- Personal and Family Sick Time & Company Paid Holidays
- Position may be eligible for a discretionary variable incentive bonus
- Parental Leave and Adoption Assistance
- 401(k) Retirement Plan
- Basic Life & Supplemental Life
- Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
- Short-Term & Long-Term Disability
- Student Loan PayDown
- Tuition Reimbursement, Personal Development & Learning Opportunities
- Skills Development & Certifications
- Employee Referral Program
- Corporate Sponsored Events & Community Outreach
- Emergency Back-Up Childcare Program
- Mobility Stipend
About Guidehouse
Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.