Physical Security Compliance Specialist - Corporate Security

About the Opportunity

The selected candidate may be offered a position within the same job family, at a level that is lower than what was posted. This will be determined based upon the results of the interview process which considers the candidate's skills, work history, experience level, and other relevant qualifications.

THIS POSITION IS ON-SITE WITHIN THE FE FOOTPRINT

The position reports to the Supervisor, Physical Security Compliance.

About the Opportunity:

Physical Security Compliance provides the operational and governance support for corporatewide security, physical security CIP compliance and Business Continuity Management for FirstEnergy personnel and assets.

This responsibility includes the governance and development of CIP policies, procedures and controls related to physical security as well as governance and oversight coordination of the Corporate Business Continuity Management program at FirstEnergy.

Physical Security Compliance is responsible for the issuance of identification badges to both employees and contractors throughout the FE footprint, access administration, and access reporting.

Physical Security Compliance Specialist - Responsibilities include:

• Develop, support, and implement the ongoing strategy of the FE physical security compliance programs to meet company, state, and federal regulatory requirements (NERC, NRC, PJM, TSA, etc.)
• Ensure effective regulatory compliance to the North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards by providing guidance to support and enhance physical security programs
• Develop and maintain FE compliance policies, programs, procedures, and guidelines related to the NERC CIP Standards
• Develop and maintain Corporate Security policies consistent with physical security best practices
• Develop and maintain Reliability Standard Audit Worksheets (RSAW), evidence documentation, and basis of compliance certifications for each NERC CIP Standard that is owned by or applies to Physical Security
• Support state based physical security regulatory requirements
• Prepare, coordinate and support compliance audits conducted by internal resources, consultants, or regulatory organizations such as RF, PJM, NERC, FERC, TSA, and state agencies
• Serve as a physical security representative for all audits, audit investigations, and planning teams for potential compliance concerns
• Conduct compliance investigations and document root cause analysis regarding potential violations and ensure they are tracked for timely resolution and fully documented in auditable records
• Utilize FE technology (RAAD, Pro-Watch, Salto, ITNow, CATSWeb, Content Navigator, Empower, SharePoint) to assign, track, and monitor compliance efforts
• Manage the regulatory required maintenance and testing program
• Manage the regulatory required visitor control program
• Manage required training such as CIP training and Physical Security Awareness Training
• Conduct research and interpret regulatory standards and policies to ensure Corporate Security business practices align with compliance requirements
• Participate in compliance champion meetings, CIP change meetings, and internal and external planning and development meetings, such as CIP Core Team, CIPC, NERC Reviews, Peer Reviews, and NATF Forum
• Conduct internal assessments to ensure implemented compliance programs satisfactorily meet regulatory requirements
• Develop and conduct assessments related to Security Operations Center (SOC) operations to ensure they operate in compliance with regulatory requirements, as well as company policies and procedures
• Provide subject matter expert support to contract labor
• Serve as a Speak Up resource

Qualifications at the Physical Security Compliance Specialist IV include:

• Bachelor's degree in Business Administration, or related field preferred with a recommended minimum of 7 years professional work experience. Must have a demonstrated working knowledge of compliance related to NERC CIP standards
• Must be able to successfully complete a background investigation to obtain CIP access
• Knowledge of physical security compliance controls, regulatory matters, and business applications preferred
• Ability to make accurate decisions and demonstrate sound judgment
• Proven ability to develop programs, training, policies, procedures, reports, and mitigation plans
• Ability to write and follow work plans
• Proficient in Microsoft Office applications
• Exceptional teamwork and interpersonal skills to aid in the resolution of compliance issues
• Strong organizational skills for planning, developing, and performing assessments and coordinating resolution of compliance issues
• Flexibility to travel which could include overnight stays
• Teamwork, communication, and innovation are essential, as well as taking independent initiative on tasks to be completed
• Excellent communication skills to effectively annotate findings in both written and verbal form
• Ability to write at a professional level to ensure a consistent understanding of the subject matter across multiple knowledge levels
• Certification as a Physical Security Professional (PSP), Certified Protection Professional (CPP), Pro-Watch Badge Administrator, or equivalent professional certification required
• FirstEnergy internal Compliance Champion certification required within 6 months of assignment
• Bachelor's degree in Business Administration or related field with a recommended minimum of 10 years professional work experience. Must have demonstrated strong performance
• Must work at a higher level of responsibility with greater self-direction
• Considered a subject matter expert

Qualifications at the Physical Security Compliance Specialist V include all of the above, plus:

• Bachelor's degree in Business Administration or related field with a recommended minimum of 10 years professional work experience. Must have demonstrated strong performance
• Must work at a higher level of responsibility with greater self-direction
• Considered a subject matter expert