ZipRecruiter

Log In

1

Cip Compliance Jobs (NOW HIRING)

MWResource, Inc.

NERC CIP Compliance Analyst

Trooper, PA · Hybrid

$50 - $63/hr

JOB-2381 Hybrid - Thursdays on-site Duration: 9 months The CIP Compliance Department is responsible for assisting in the development, coordination, monitoring, and communication of all applicable ...

360 IT Professionals

NERC CIP Analyst

Sacramento, CA · On-site

Must have at least two (2) years NERC Critical Infrastructure Protection (CIP) Compliance Evidence Preparation, Technical Writing, or Audit Experience Desirable Qualifications: At least two (2) years ...

PSEG

GRC Compliance Analyst

Bethpage, NY · On-site

$96K - $96K/yr

The NERC Compliance Specialist is responsible for ensuring compliance with NERC CIP (Critical Infrastructure Protection) and other regulations related to IT systems and processes. Documents ...

PSEG

GRC Compliance Analyst

Bethpage, NY · On-site

$96K - $96K/yr

The NERC Compliance Specialist is responsible for ensuring compliance with NERC CIP (Critical Infrastructure Protection) and other regulations related to IT systems and processes. Documents ...

NAES

NERC CIP Reliability Specialist

Houston, TX · On-site

$107K - $123K/yr

Summary The NERC CIP Reliability Specialist is responsible for developing and maintaining a comprehensive NERC CIP Reliability Compliance Program by establishing required plans, schedules, procedures ...

GDH

NERC CIP Network Specialist

San Diego, CA · On-site

$60 - $69/hr

Support NERC CIP compliance initiatives, including documentation, evidence collection, audit readiness, and remediation activities. * Manage and troubleshoot complex firewall, network, and ...

previous pagenext page

Showing results 21-40

All JobsCip Compliance Jobs

Cip Compliance information

See salary details

$50K

$157.5K

How much do cip compliance jobs pay per year?

As of Aug 16, 2026, the average yearly pay for cip compliance in the United States is $152,036.00, according to ZipRecruiter salary data. Most workers in this role earn between $157,000.00 and $157,000.00 per year, depending on experience, location, and employer.

What is CIP compliance?

CIP compliance refers to adhering to the Customer Identification Program (CIP) regulations, which are part of the USA PATRIOT Act. Financial institutions must verify the identity of customers opening accounts to prevent money laundering and terrorist financing. This involves collecting information such as name, date of birth, address, and identification number, and verifying this information through reliable means. Institutions must also maintain records and compare customer information with government lists of known or suspected terrorists. CIP compliance is essential for maintaining a secure financial system and avoiding regulatory penalties.

What are the key skills and qualifications needed to thrive as a CIP Compliance specialist?

To thrive as a CIP (Customer Identification Program) Compliance Specialist, you need a solid background in regulatory compliance, anti-money laundering (AML) principles, and familiarity with financial services regulations, often supported by a degree in finance, law, or a related field. Expertise with compliance management software, transaction monitoring systems, and relevant certifications like CAMS (Certified Anti-Money Laundering Specialist) are typically required. Attention to detail, analytical thinking, and strong communication skills set professionals apart in ensuring accurate due diligence and reporting. These skills are crucial for identifying risks, maintaining regulatory standards, and protecting the organization from financial crimes.

What are some common challenges faced in a CIP Compliance role, and how can they be effectively managed?

CIP Compliance professionals often encounter challenges such as keeping up with evolving regulatory requirements, ensuring consistency in Know Your Customer (KYC) processes across different departments, and managing large volumes of customer data. To effectively manage these, it's important to stay updated through ongoing training, establish clear procedures for information collection and verification, and leverage technology to automate and streamline compliance checks. Regular collaboration with legal, operations, and IT teams is also key to maintaining strong compliance standards and addressing any gaps promptly.

What is the difference between Cip Compliance vs Cip Auditor?

AspectCip ComplianceCip Auditor
CertificationsOften requires certifications like CIPP, CIPM, or similarTypically holds certifications such as CIPP, CIPM, or related privacy and compliance credentials
Work EnvironmentWorks within organizations to ensure policies meet compliance standardsPerforms audits and assessments to verify compliance with Cip standards
Employer & Industry UsageUsed by financial institutions, healthcare, and data-sensitive industriesEmployed by firms conducting compliance audits or consulting agencies

In summary, Cip Compliance professionals focus on implementing and maintaining compliance policies within organizations, while Cip Auditors evaluate and verify adherence through audits. Both roles require similar certifications and work in compliance-heavy industries, but their core functions differ: one manages compliance processes, the other assesses their effectiveness.

More about Cip Compliance jobs

What job categories do people searching Cip Compliance jobs look for?

The top searched job categories for Cip Compliance jobs are:

Infographic showing various Cip Compliance job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 84% Full Time, 11% Part Time, and 4% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution, with an average salary of $152,036 per year, or $73.1 per hour.

Senior NERC CIP Compliance Analyst

Consolidated Asset Management Services

Oswego, NY • On-site

$130K - $160K/yr

Full-time

Posted 24 days ago

Job description

Description
The Sr. NERC CIP Compliance Specialist provides critical on-site leadership to protect and maintain the integrity of control and business networks at our Low and medium-impact generating stations. This role drives continuous compliance with NERC CIP cybersecurity standards, leads site security initiatives, and serves as the primary subject matter expert for station personnel. Operating as a key liaison, this position partners with cross-functional stakeholders to enforce a secure operational environment and ensure continuous audit readiness through rigorous evidence management.
Essential Duties and Responsibilities
  • Program Ownership: Build, optimize, and maintain on-site processes and documentation to ensure continuous adherence to NERC CIP standards.
  • Asset & Baseline Management: Maintain accurate cyber asset inventories and manage baseline change control workflows.
  • Audit Leadership: Lead RSAW/ERT preparation and submission for Regional Entity audits, spot checks, and compliance investigations.
  • Access Control: Maintain compliant physical and electronic security perimeters and access controls for all site assets.
  • Routine Compliance: Execute daily, monthly, quarterly, and annual CIP compliance activities in accordance with program procedures.
  • Liaison & RFI Coordination: Serve as the primary site contact for Regional Entities; coordinate cross-functional teams to fulfill RFIs and remediate findings.
  • Training Delivery: Deliver and support mandatory NERC CIP cybersecurity compliance training programs for site personnel.
  • Patch Management: Direct the end-to-end patch management lifecycle, ensuring BES Cyber Assets are monitored and updated within regulatory timelines.
  • Incident Response & Drills: Lead the annual testing, documentation, and reporting of the Cyber Security Incident Response Plan (CIP-008) and Recovery Plans (CIP-009).
  • Vulnerability Assessments (CIP-010): Orchestrate annual Critical Vulnerability Assessments (CVAs) while ensuring zero adverse impact tooperational BES infrastructure.
  • Information Protection: Oversee the identification, classification, and secure handling of Bulk Electric System (BES) Cyber System Information (BCSI) to prevent unauthorized disclosure.
  • Supply Chain Risk (CIP-013): Lead supply chain risk assessments and collaborate with procurement/legal to enforce cybersecurity contract clauses.
  • Self-Assessments & Mitigation: Conduct proactive internal compliance self-assessments; manage the identification, self-logging, and mitigation of compliance deviations.

Requirements
  • Bachelor's degree in Engineering, Computer Science, IT, Cybersecurity, or a related technical discipline (equivalent direct experience considered).
  • Minimum of 5-10 years of professional experience in regulatory compliance, power utility operations, or industrial cybersecurity.
  • At least 5 years of hands-on experience implementing and managing a NERC CIP compliance program across Medium or High-impact assets.
  • Demonstrated success drafting RSAWs, preparing ERT responses, and managing RFIs during Regional Entity audits or spot-checks.
  • Deep operational understanding of the 35-day patch/baseline lifecycle (CIP-007/010), security perimeters (CIP-005/006), and supply chain management (CIP-013).
  • Ability to successfully pass a mandatory NERC CIP-004 Personnel Risk Assessment and background check.
  • Ability to work full-time on-site at the designated facility, travel up to 25% as needed, and safely navigate physical plant environments.
  • Ability to perform physical job duties, including lifting to 25 pounds, climbing, bending, and working in industrial environments (Use of PPE is required).

Preferred Skills and Certifications
  • Prior experience working directly within a power generation plant, transmission control center, or EMS/GMS environment.
  • NERC Certified Compliance Professional (NCCP) designation.
  • CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), or CISM (Certified Information Security Manager).
  • SANS GIAC certifications, specifically GCIP (GIAC Critical Infrastructure Protection) or GICSP (Global Industrial Cyber Security Professional).
  • Established working relationships and direct audit experience with our specific Regional Entity (e.g., SERC, WECC, NPCC, RF, MRO, Texas RE).
  • Commitment to cybersecurity excellence and regulatory compliance is a must.

Apply