Cyber Security/NERC CIP Consultant

Acumen is hiring an intermediate Cyber Security/NERC CIP Consultant to help utilities and other critical-infrastructure entities secure IT and OT systems and comply with NERC CIP standards. The role includes security assessments, CIP managed services and audit support, client project leadership, and contributing to business development.

Responsibilities:

• Cyber Security: Run patch and vulnerability assessments, support penetration testing across IT and OT environments, and help design and implement firewalls, network solutions, remote access, IDS/IPS, malware prevention, internal monitoring, and SIEM solutions. Assist in the development of programs for cyber security risk identification, prioritization, and remediation, including client documentation, processes, and procedures in the OT sector
• NERC CIP Compliance: Collect, review and manage audit evidence across CIP-002 to CIP-015. Prepare RSAWs, Self-Reports, TFEs and mitigation plans. Write policies and procedures, and support CIP audits, assessments and mock audits
• Stay Ahead of the Standards: Track evolving Cyber Security standards including NIST, NERC CIP updates, FERC orders, and Regional Entity guidance so clients stay audit-ready, and join industry groups, regional workshops, and NERC and Cyber Security working groups
• Be the Trusted Advisor: Deliver reports, presentations, Cyber Security and NERC CIP training to client teams, and support and lead projects to keep engagements on track
• Grow the Team: Review analyst work, give clear direction, and help junior team members build their skills
• Fuel Our Growth: Spot new business development opportunities, contribute to proposals, represent Acumen at conferences and events, and help shape our market strategy for Cyber Security and NERC CIP reliability services
• Relationship & Project Management: Lead client facing engagements - providing project leadership and coordination activities internally and with existing and new clients. Serve as Acumen’s client liaison, ensuring a quality work product, client satisfaction, and long term beneficial alliances

Requirements:

• You bring 5-8 years of experience in the electric utility industry, with substantial focus on cyber security, IT/OT systems, networks and software, and NERC CIP compliance
• You have a Bachelor's degree in Electrical Engineering, Computer/Software Engineering, Cybersecurity, Business, or related discipline
• You have a working knowledge of power system operations (generation, transmission, distribution) and OT environments supporting critical infrastructure operations including BES Cyber Systems, water and wastewater, gas, transit, etc
• You know your way around vulnerability assessments, penetration testing, and cyber security standards and frameworks
• You have direct experience with NERC CIP Standards, FERC reliability requirements, and Regional Entity audit processes
• You have a strong understanding of CIP documentation requirements including RSAW development and evidence collection/management
• You're an exceptional communicator who builds strong client relationships and turns complex technical topics into clear reports and presentations
• You're analytical and detail-oriented, with great organization and time management - equally strong on a team or as an individual contributor
• You learn fast and are curious about the rest of Acumen's work across our Practice Areas
• Bachelor's degree in Electrical Engineering, Computer/Software Engineering, Computer Science, Cybersecurity, Business, or a related discipline
• Must be currently legally authorized to work in the US and able to obtain a work permit to work and travel in Canada and internationally upon hire
• 5-8 years of relevant experience, preferably in the electric or utility industry, including hands-on work in cyber security and NERC CIP compliance
• GICSP, CISSP (or working towards it), CISM, CEH, CCNA and/or CCNP
• Consulting or proposal-writing experience is a plus