Principal Compliance & Risk Consultant

Role Overview

• Provide expertise to leadership and cross-functional teams regarding development, implementation, and monitoring of controls and mitigation plans.
• Develop compelling data-driven business cases for or against specific courses of action and potential risk mitigation alternatives as appropriate.
• Lead company response to regulatory data requests, investigations, audits, and other inquiries.
• Regularly updates leadership on changes to requirements/standards, metrics, program effectiveness, and opportunities for improvement.
• Lead issue investigations, cause evaluation exercises and develop corrective actions to remediate and mitigate compliance issues.
• Participate in risk management forums at the enterprise level.
• Complete assigned projects, tasks or support activities outlined in the team’s annual work plan based on program priorities and compliance risk.
• Develop and analyze business processes to identify, design or improve internal controls
• Perform internal controls assessments including design and operational effectiveness testing.
• May act as team lead but does not have any direct reports.
• Develop partnerships with functional area teams to ensure consistency of compliance approach and promote an effective enterprise compliance culture.

Requirements

• BA/BS or equivalent work experience in business or other relevant discipline
• 10+ years in operations, engineering and/or compliance, including 2 years focused on NERC, FERC or Cybersecurity (or closely related experience)
• MBA or MS in risk, compliance, sciences, engineering or related discipline, or equivalent experience (desired)
• Strong program management, project management, internal consulting, change management, and process improvement skills (desired)
• Excellent verbal and written communication skills to clearly convey information and ideas to stakeholders at all levels in the organization (desired)
• Ability to work independently with guidance on only the most complex issues (desired)
• Ability to work closely with functional area representatives as a true partner (desired)
• Consistent demonstration of a high level of innovative and new thinking focused on compliance strategy, controls, and implementation (desired)
• Advanced knowledge of compliance, risk management and internal controls (desired)
• Application of demonstrated knowledge and skill to resolve complex problems (desired)
• Ability to identify and implement program and process improvement opportunities (desired)
• Ability to effectively communicate complex data and findings to diverse audiences using a variety of media and visual management (desired)
• Proficient with Microsoft products including Word, Excel, PowerPoint, SharePoint (desired)
• Certified Information Systems Security Professions (CISSP) or equivalent (desired)
• Certified Information Systems Manager (CISM) or equivalent (desired)
• Project Management Professional (PMP) (desired)
• NERC System Operator Certification (desired)
• Familiarity with implementing Lean Management (desired)

Tech Stack

• Cyber Security
• PMP

Benefits

• PG&E’s discretionary incentive compensation programs