Our Company

The North American Electric Reliability Corporation (NERC) is a not-for-profit international regulatory authority whose mission is to assure the effective and efficient reduction of risks to the reliability and security of the grid. NERC develops and enforces Reliability Standards; annually assesses seasonal and long‐term reliability; monitors the bulk power system through system awareness; and educates, trains, and certifies industry personnel. NERC’s area of responsibility spans the continental United States, Canada, and the northern portion of Baja California, Mexico. NERC is the Electric Reliability Organization (ERO) for North America, subject to oversight by the Federal Energy Regulatory Commission (FERC) and provincial authorities in Canada. NERC’s jurisdiction includes users, owners, and operators of the bulk power system, which serves nearly 400 million people.

Our Mission

The vision for the ERO Enterprise, which is comprised of NERC and the six Regional Entities, is a highly reliable and secure North American bulk power system. Our mission is to assure the effective and efficient reduction of risks to the reliability and security of the grid.

Your Impact

The Senior Auditor is responsible for assisting with the continued enhancement of the corporation’s internal audit methodology, processes, and services, including systematically gathering risk information and performing risk assessments; planning, executing, and reporting on internal audits; and ensuring adequacy of and compliance with internal operating controls, corporate ethics, and other policies and regulations. The Senior Auditor will work under the direction of the Director of Internal Audit and closely with the management team and industry stakeholders.

Your Role

The Senior Auditor will perform the following duties as part of the Internal Audit team:

Assist with the execution of independent risk assessments (periodic and annual) by integrating current and emerging risk information into a comprehensive risk assessment approach that encompasses varying risk categories (i.e., strategic, entity, operational, financial, legal, regulatory, and compliance).
Assess IT controls for adequacy for customer-facing software applications.
Evaluate logical security, privileged user management, system development lifecycle, software patching, vulnerability scanning, database security, business continuity/disaster recovery, and network security controls.
Determine audit scope and objectives based on an appropriate risk assessment in conjunction with management.
Develop a suitable audit program based on the risk assessment and related exposures.
Perform key audit procedures (independently or with assistance from a team member).
Document all relevant workpapers using the audit management system.
Communicate progress to Internal Audit and Client management throughout the audit (from planning to completion).
Prepare a Draft Report for Audit Management.
Participate in the quarterly follow-up process to ensure that audit recommendations are properly implemented.
Ensure that audits are conducted in a manner consistent with pertinent departmental and company policies as well as IIA Standards.
Identify and implement continuous department improvement opportunities.
Perform departmental administrative responsibilities or tasks as required and/or delegated, including creation of audit updates, and reporting for respective organizational governance routines.

Qualifications

The successful candidate will have at a minimum:

Undergraduate degree in business, IT/security, or finance.
Information security and/or cyber security auditing experience.
An auditing or IT credential(s), such as CPA, CIA, CISA, CISSP, etc., is preferred.
Three to five years leading and conducting internal audits.
Demonstrated proficiency and working knowledge of IIA Standards, GAAP, and internal control and risk frameworks (i.e., COSO ERM)
Strong task management, attention to detail, and prioritization skills. Demonstrated ability to follow through on all assigned tasks.
Effective communication and presentation skills and willingness to collaborate with key stakeholders within the organization, industry, and government.
Team-oriented attitude.
Proficiency in the use of MS Office applications (Excel, Word, PowerPoint) plus data analysis and data visualization techniques and tools (ACL, Tableau, and PowerBI).

Other

A background check will be conducted prior to employment.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

This position has been classified as exempt.
The position may be based remotely but must be able to travel to NERC offices if needed. Reimbursement of travel expenses will be in accordance with the company’s travel and expense reimbursement policies.

Our Culture Declarations

Everyone at NERC is a leader.
We are accountable personally and organizationally to deliver on commitments.
We develop ourselves and people in the organization to ensure that NERC realizes its strategic objectives.
We are resilient and adaptable to the challenges and needs of the business/people.
We exude a growth mindset and empower teams to take risks.
We build collaborative relationships within NERC, the ERO, and the stakeholders of NERC.
We exemplify NERC cultural behaviors:
- We reward high-quality, creative, and innovative work.
- We attract, engage, and retain top talent.
- We value and respect diverse perspectives.
- We provide a safe, inclusive, and collaborative work environment.
- We form strong relationships within the company and with the ERO Enterprise.
- We demonstrate curiosity in a wide variety of areas and are open to exploring new situations, knowledge, and opportunities for growth and development.
- We demonstrate an anticipatory mindset by preventing problems and building contingencies where appropriate.
- We champion diversity and inclusion by seeking out and valuing diverse perspectives.