ASSIGNMENT RESPONSIBILITIES
Note: All official drafts, documents and recommendations, as listed below, must be reviewed, finalized and approved / accepted by appropriate BPA manager or other federal personnel with the authority to do so.
Reliability Compliance:
Provide monitoring, review, analysis and support for the JTO Security and Compliance program; assessing that compliance evidence is reliable, consistent, and useful and provide recommendations as requested. Analysis includes identifying and providing recommendations on potential impacts to Transmission programs and processes.
Act as the primary point of contact (POC) for processes for the JTO Security and Compliance program and sub-programs as assigned to include:
Respond to phone/email incoming compliance questions based on process documented solutions available.
Assist stakeholders with process questions and/or training as needed.
Alert BPA manager of any noted concerns or potential issues.
Assist in drafting solutions, processes and procedures required to achieve and sustain NERC CIP reliability compliance for the BPA Control Center and Field programs.
Provide support for Transmission audits by providing data call response coordination, data gathering, and technical writing.
Provide quality assurance support to help the organization adhere to established compliance standards and guidelines; alert BPA manager of any noted concerns or potential issues.
Draft processes and procedures to support NERC Mandatory Reliability standards and DOE NIST/FISMA security controls implementation.
Assist in development of training materials and job aids to support above.
Assist in development of documentation necessary for reporting and audit requirements.
Support BPA JTO staff with cyber security reviews and analysis as requested by BPA manager
Information Quality Control and Stewardship:
Review business processes for maintaining information quality control and quality assurance and provide gap analysis for those processes. Provide recommendations to BPA manager on alternative changes in processes and procedures to address such gaps.
Draft, prepare, and maintain performance metrics on the quality of key business information.
Facilitate Risk Management Framework and supporting inputs, processes, documentation, and training materials; communicate options and recommendations to SMEs and BPA management to solicit feedback and further course direction.
Draft and prepare briefings, as requested, to staff and managers on information quality to:
Raise awareness;
Transfer knowledge on information quality fundamentals and/or best practices, and services.
Data Call and Survey Coordination:
Provide data call and industry survey support for the Transmission organization:
Review and analyze existing documentation;
Evaluate new or changing requirements;
Enlist appropriate subject matter expert input;
Draft Transmission responses for BPA manager review and approval.
Organize, monitor, analyze, evaluate and provide recommendations on quality and performance pertaining to current data call artifacts collection and processes.
Work with internal business stakeholders and facilitate gathering and analyzing information using standard tools and approaches and provide recommendations to include:
Clarifying business operations and functions;
Documenting and mapping current and future states;
Performing gap analysis;
Identifying and evaluating solution alternatives and providing weighted recommendations;
Drafting associated processes and procedures for management approved direction.
REQUIREMENTS
Education & Corresponding Experience (required on matrix)
A degree in Business Administration, Management, Accounting, and Computer Science or a directly related discipline (or closely related field) is preferred.
With an applicable bachelor's degree, 5 years of experience is required.
With an applicable associate's degree, 7 years of experience is required.
Without an applicable degree, 9 years of experience is required.
Experience should be consistent with the specific requirements of business or operations analysis and progressively more technical in nature.
Required Technical Skills & Experience (required on matrix)
5 years' experience performing quantitative analysis.
1 year experience using automated data systems to include SharePoint and Visio sufficient to perform technical outputs. Technical output can include use of advanced printing such as plotters, and cross-software embedding for presentations or technical webinars.
Preferred Skills & Experience (optional on matrix)
1 year of experience with North American Electric Reliability Corporation, Critical Infrastructure Protection (NERC CIP) regulatory standards and requirements.
1 year of experience with the Risk Management Framework and the 800 series of National Institute of Standards & Technology (NIST) Special Publications (in particular 800-37, 800-39, 800-53, 800-53A, and 800-115).
1 year of experience coordinating and maintaining NERC CIP requirements for an electrical utility or comparable public or private utility facilities.
1 year of technical writing and editing experience.
Knowledge of the application of Cyber Security practices within the Federal Environment or other electrical utility or comparable public or private utility facilities.
CISSP or equivalent.
Information Technology Infrastructure Library (ITIL) Foundation Certification.
Additional Requirements (not required on matrix)
Valid U.S. Driver's License is required.