Key Responsibilities
- Analyze and document existing SigmaFlow workflows, configurations, integrations, roles, permissions, and reporting.
- Map workflows and workflow steps to NERC CIP requirements.
- Develop and maintain compliance coverage matrices for CIP-002 through CIP-014.
- Focus on CIP-004, CIP-007, CIP-010, and CIP-011 requirements.
- Identify compliance gaps and validate audit evidence generated by workflows.
- Perform SigmaFlow upgrade, migration, and non-production validation testing.
- Analyze SQL datasets, database schemas, APIs, integrations, and custom configurations.
- Perform defect triage and root-cause analysis.
- Evaluate access controls, privilege boundaries, and separation-of-duties requirements.
- Assess upgrade vs. rebuild options based on cost, risk, effort, and compliance impact.
- Conduct SME interviews and capture undocumented business and workflow requirements.
- Develop SOPs, architecture documentation, test plans, playbooks, and cutover/rollback runbooks.
- Support compliance continuity during platform upgrades or outages.
- Provide knowledge transfer and training to client and delivery teams.
Required Skills
- Extensive SigmaFlow experience
- Strong NERC CIP knowledge
- Experience with CIP-002 CIP-014
- Strong knowledge of CIP-004, CIP-007, CIP-010 & CIP-011
- Compliance workflow management and requirement traceability
- Utility / Energy / Power industry experience
- SQL and database experience
- Workflow configuration and system integrations
- Platform upgrade / migration experience
- Access governance / RBAC / Separation of Duties
- Compliance evidence and audit readiness
- Strong analytical and documentation skills
Rate:
Not specified
Location:
Remote
IR35 Status:
Outside
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Not Specified