Senior Consultant - NERC CIP SME

Job Family :

• Risk & Regulatory Compliance Consulting
• Travel Required :

• Up to 25%
• Clearance Required :

None

What You Will Do :

We are seeking a highly skilled professional to design and implement secure, compliant architectures for enterprise and operational environments. This role requires deep expertise in regulatory frameworks, cybersecurity best practices, and advanced data architecture.

Key Responsibilities

Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data.

Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance.

Implement NERC CIP standards (002–013), including audit preparation, evidence gathering, and mitigation planning.

Secure data flows across AWS, Azure, and on-prem environments using encryption, IAM, and network segmentation.

Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations

Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.

Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.

Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.

Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.

What You Will Need :

Due to nature of client engagements must be a US Permanent Resident or US Citizen

Bachelor’s degree from an accredited university/college

Minimum of THREE (3) years post-graduation working experience within the electric utility industry or a NERC related regulator.

Work experience for all levels must be an emphasis on North American NERC Reliability Standards (USA and/or Canada) supporting regulatory framework and processes around NERC Critical Infrastructure Protection (CIP) and Regional Entities.

Experience in designing enterprise data models, data lakes, warehouses, and integration frameworks using structured and unstructured data.

Deep understanding of NIST, ISO 27001, and CIS controls to architect secure systems and enforce security compliance.

In-depth knowledge of implementing NERC CIP standards (002–013), audit preparation, evidence gathering, and mitigation planning.

Proficient in securing data flows across AWS, Azure, and on-prem environments with encryption, IAM, and network segmentation.

Designs and implements RBAC, ABAC, MFA, and privileged access management aligned with CIP-007 and CIP-005 requirements.

Ability to design secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.

Familiar with securing OT environment such EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.

Ensures integrity, availability, and confidentiality of data through metadata standards, classification, retention, and purging policies.

Strong writing skills for creating security architecture diagrams, CIP evidence packages, procedures, and training materials.

Works effectively with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.

Ability to travel to include potential international as needed.

Ability to work onsite in a Guidehouse Office or Client Office location.

Currently reside in the contiguous United States.

What Would Be Nice To Have :

Preference will be given to candidates within reasonable driving distance of listed core Guidehouse Office or Client Office Location.

Specific working experience related to any of the following:

Bulk Electric System (BES) and power systems

Electrical Reliability

NERC/FERC Enforcement or Auditing

• The annual salary range for this position is $89,000.00-$148,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.
• What We Offer :

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

Medical, Rx, Dental & Vision Insurance

Personal and Family Sick Time & Company Paid Holidays

Position may be eligible for a discretionary variable incentive bonus

Parental Leave and Adoption Assistance

401(k) Retirement Plan

Basic Life & Supplemental Life

Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

Short-Term & Long-Term Disability

Student Loan PayDown

Tuition Reimbursement, Personal Development & Learning Opportunities

Skills Development & Certifications

Employee Referral Program

Corporate Sponsored Events & Community Outreach

Emergency Back-Up Childcare Program

Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.