Senior Advisor, OT Governance and Compliance

Role and Responsibilities

• Develop and lead the OT governance and compliance strategy, ensuring alignment with NERC CIP requirements, internal policies, and evolving regulatory obligations
• Own the OT risk management process, identifying and documenting cybersecurity risks, control gaps, and mitigation plans across operational technology environments.
• Develop and maintain governance documentation, including OT-specific policies, standards, and procedures, ensuring they reflect regulatory changes and industry best practices.
• Prepare executive-level reports and presentations to communicate OT governance and compliance program status, audit outcomes, and emerging risks to leadership.
• Serve as the primary liaison between OT teams, regulatory bodies, and internal audit functions, ensuring clear communication and accurate evidence gathering
• Drive resolution of problems of high complexity and cross-functional scope.
• Lead team-wide projects and activities.
• Represent the team in communications with clients and within the wider organization. Provide technical expertise.
• Develop team training and train and mentor newer team members.
• Support implementation of strategic direction and initiatives. Drive team improvement initiatives.

Required Qualification & Education

• Professional certifications highly preferred
• Proven client communication skills
• Proven documentation, presentation, and communication skills internally and externally
• University Degree with 4-8 years of domain experience. Masters degree with 2-6 years domain experience. Doctorate with 0-4 years domain experience.

Required Skills & Competencies

• Strong understanding of OT system architectures, including SCADA systems, ICS networks, and remote access technologies.
• Excellent communication skills, with the ability to effectively convey complex regulatory and technical concepts to technical teams, executives, and auditors.
• Strong collaboration skills, with the ability to work cross-functionally with Engineering, Cybersecurity, Operations, and Compliance teams.
• Exceptional organizational skills and attention to detail, particularly in managing compliance evidence, audit findings, and risk registers.
• Analytical mindset with strong problem-solving skills, capable of identifying root causes of compliance gaps and developing actionable remediation plans.
• Strong leadership and project management skills - organizing work, planning, monitoring and making tradeoffs to ensure quality deliveries.
• Able to liaise with clients and internal teams on significant issues
• Big picture thinking that drives team to meet organizational goals and provides cross-functional improvements.
• Root cause analysis & process improvement
• Able to lead and work as part of a cross-functional team

Required Software Knowledge

• Expertise in MS Office MS Office (Word, Excel, PowerPoint, [Project], [Access], [Publisher]) and Adobe PDF toolsets
• GRC Platforms

Preferred Experience

• Experience developing and implementing governance frameworks, policies, and procedures tailored to OT environments.
• Familiarity with cybersecurity standards and frameworks such as NIST CSF, ISA/IEC 62443, and ISO 27001, particularly as they apply to ICS/OT environments.
• Demonstrated experience interacting with regulators, auditors, and executive leadership to communicate compliance status and risk posture.
• Experience in creating and delivering training.
• Process improvement experience with Lean Six Sigma Green or Black Belt.
• Experience in the green energy or utilities domain
• Experience with a U.S. based company

Preferred Skills & Competencies

• Ability to translate regulatory requirements into actionable technical and operational controls.
• Experience developing and tracking key metrics to assess the health and maturity of OT governance and compliance programs.
• Root cause analysis and problem-solving skills
• Strong communication skills with the ability to distill information and present it in an understandable manner appropriate for the audience
• Training creation, process improvement.
• Coaching / leadership skills

Physical Requirements

• Ability to sit for prolonged periods of time on a computer
• Ability to travel as necessary.