OT Compliance Administrator - TEMP

Overview

Pattern Energy is an independent, fully integrated energy company that develops, constructs, owns and operates renewable energy projects and transmission assets across North America, Canada and parts of Latin America.  The company focuses primarily on wind and transmission, with limited investments in other generation technologies.

The Pattern Energy team has a history as one of the top North American renewable energy and transmission providers in the industry. The team is dedicated to delivering the highest value for its customers, partners, financial supporters and the communities in which it works, while exhibiting a strong commitment to promoting environmental stewardship and corporate responsibility.

Pattern Energy operates in the United States and Canada, with offices in San Francisco, Houston, San Diego and New York.  Pattern Energy Group LP's corporate headquarters are in San Francisco.

The OT Compliance Specialist ensures that an organization's operational technology (OT) systems and processes adhere to all relevant industry regulations, standards, and internal policies, with a focus on safety, security, and data integrity. The role involves close collaboration with Regulatory and Compliance, InfoSec, SCADA and other engineering teams, perform regular compliance assessments, and maintaining comprehensive documentation to demonstrate adherence to regulatory requirements.

Responsibilities

Key Responsibilities:

Regulatory Monitoring

• Stay updated on evolving OT compliance regulations and standards such as NERC CIP, IEC 62443, and industry-specific requirements.
• Identify potential compliance gaps and risks within the OT network.

Compliance Assessments and Audits

• Conduct regular assessments of OT systems and processes to identify compliance issues.
• Perform risk analysis and develop mitigation plans.

NERC CIP and Vulnerabilities Patching

• Be responsible for completing all NERC CIP patching requirements every 35 days for ESP medium impact devices, including performing the patching of these devices.
• Identify and prioritize vulnerabilities within the OT network.

• Implement security controls to address potential threats and maintain system resilience.

Design Review and Implementation

• Collaborate with Regulatory and Compliance team to ensure OT systems designs incorporate necessary compliance considerations from the initial development stage.

Documentation and Reporting

• Create and maintain comprehensive compliance documentation, including policies, procedures, test results, and reports to demonstrate adherence to regulations.

Training and Awareness

• Educate OT personnel on compliance requirements, security best practices, and proper incident reporting procedures.

Qualifications

• Bachelor’s degree in information technology, Cybersecurity, Engineering, or a related field or 5 years of relevant experience.
• Strong understanding of OT protocols and technologies such as Modbus, Profibus, OPC UA, and industrial network architectures.
• Proficiency with cybersecurity concepts including firewalls, intrusion detection/prevention systems, and network segmentation.
• Knowledge of relevant compliance frameworks like NERC CIP, IEC 62443, and ISO 27001.
• Experience with OT security tools and vulnerability scanning solutions.

Skills and Competencies:

• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Ability to work independently and collaboratively within a team.
• Detail-oriented with a strong commitment to accuracy and compliance.

Work Environment:

• Office environment with occasional site visits to assess compliance and conduct inspections. (Hybrid)
• May require travel to various company facilities and external compliance meetings.

#LI-DR1 #LI-Hybrid