Physical Security Compliance Specialist - Corporate Security at FirstEnergy in Akron, OH

Job description

About the Opportunity The selected candidate may be offered a position within the same job family, at a level that is lower than what was posted. This will be determined based upon the results of the interview process which considers the candidate's skills, work history, experience level, and other relevant qualifications. THIS POSITION IS ON-SITE WITHIN THE FE FOOTPRINT The position reports to the Supervisor, Physical Security Compliance. About the Opportunity: Physical Security Compliance provides the operational and governance support for corporatewide security, physical security CIP compliance and Business Continuity Management for FirstEnergy personnel and assets. This responsibility includes the governance and development of CIP policies, procedures and controls related to physical security as well as governance and oversight coordination of the Corporate Business Continuity Management program at FirstEnergy. Physical Security Compliance is responsible for the issuance of identification badges to both employees and contractors throughout the FE footprint, access administration, and access reporting. Physical Security Compliance Specialist - Responsibilities include: Develop, support, and implement the ongoing strategy of the FE physical security compliance programs to meet company, state, and federal regulatory requirements (NERC, NRC, PJM, TSA, etc.) Ensure effective regulatory compliance to the North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards by providing guidance to support and enhance physical security programs Develop and maintain FE compliance policies, programs, procedures, and guidelines related to the NERC CIP Standards Develop and maintain Corporate Security policies consistent with physical security best practices Develop and maintain Reliability Standard Audit Worksheets (RSAW), evidence documentation, and basis of compliance certifications for each NERC CIP Standard that is owned by or applies to Physical Security Support state based physical security regulatory requirements Prepare, coordinate and support compliance audits conducted by internal resources, consultants, or regulatory organizations such as RF, PJM, NERC, FERC, TSA, and state agencies Serve as a physical security representative for all audits, audit investigations, and planning teams for potential compliance concerns Conduct compliance investigations and document root cause analysis regarding potential violations and ensure they are tracked for timely resolution and fully documented in auditable records Utilize FE technology (RAAD, Pro-Watch, Salto, ITNow, CATSWeb, Content Navigator, Empower, SharePoint) to assign, track, and monitor compliance efforts Manage the regulatory required maintenance and testing program Manage the regulatory required visitor control program Manage required training such as CIP training and Physical Security Awareness Training Conduct research and interpret regulatory standards and policies to ensure Corporate Security business practices align with compliance requirements Participate in compliance champion meetings, CIP change meetings, and internal and external planning and development meetings, such as CIP Core Team, CIPC, NERC Reviews, Peer Reviews, and NATF Forum Conduct internal assessments to ensure implemented compliance programs satisfactorily meet regulatory requirements Develop and conduct assessments related to Security Operations Center (SOC) operations to ensure they operate in compliance with regulatory requirements, as well as company policies and procedures Provide subject matter expert support to contract labor Serve as a Speak Up resource Qualifications at the Physical Security Compliance Specialist IV include: Bachelor's degree in Business Administration, or related field preferred with a recommended minimum of 7 years professional work experience. Must have a demonstrated working knowledge of compliance related to NERC CIP standards Must be able to su