Tacoma Public Utilities
Position Description
Tacoma Power is seeking an Audit Risk and Controls Manager under the job classification Manager, Power Utility to join our Power Shared Service division. The Audit Risk and Controls Manager is accountable for risk management processes, enforcement processes, and assessment processes carried out by the Internal Auditors. This position assists in managing the day-to-day operations of Tacoma Power’s Internal Compliance Program (ICP). It is a key position for ensuring Tacoma Power complies with NERC Standards and Requirements, working with and under the oversight of WECC.
Responsibilities
Manage the NERC Risk Management Program, which is comprised of the Compliance Assessment Procedure, Internal Controls Process, Reliability Risk Assessment Procedure, Closure of Compliance Recommendations Procedure, and Internal Investigations Procedure.
Provide direction and guidance to staff for timely and efficient implementation of the program.
Compliance Assessments.
Oversee compliance assessments, including internal audits, spot checks, and implemented controls assessments. Provide guidance and direction to staff on schedule, recommendations, and assessing risk and compliance.
Internal Controls.
Oversee the process to develop, inventory, assess, and monitor internal controls.
Reliability Risk Assessments.
Oversee risk assessment inputs to provide high, medium, and low risk ratings of all applicable NERC Reliability Standard requirements. Provide reporting and recommendations to Section Managers based on risk assessment outcomes for oversight and risk-based decision-making.
Closure of Compliance Recommendations.
Provide guidance to staff and stakeholders on recommendations and areas of concern. Resolve disputed recommendation issues between staff, Power Division Supervisors, and Assistant Power Division Section Managers.
Internal Investigations.
Initiate the Internal Investigation Procedure on potential compliance violations and bring findings before the Reliability & Compliance Governance Committee (RCGC) as appropriate. Ensure that all evidentiary documentation associated with a potential compliance violation is retained in accordance with all applicable retention requirements.
Develop and implement an annual schedule for Tacoma Power’s internal compliance assessments of NERC Reliability Standards and bring critical issues to the RCGC.
Assist the Reliability and Compliance Assistant Manager (RCAM) with managing Tacoma Power's response to periodic audits, spot checks, mandatory data submittals and exception reporting, pursuant to NERC and WECC's Compliance Monitoring Enforcement Program.
Supervise staff, including assigning, scheduling, monitoring, coordinating and verifying work or tasks; evaluating, training, developing and mentoring to improve skillsets and competencies.
Hold staff accountable and provide coaching, counseling, feedback recognition, awards, or discipline based on performance and measurable achievement.
Hire personnel, develop PDFs, and create onboarding plans.
Set and track goals with staff and perform periodic performance reviews.
Lead the Audit, Risk, and Controls group in fulfilment of their roles and responsibilities as documented in the Internal Compliance Program (ICP).
Qualifications Minimum Education:
Bachelor's degree in engineering, business administration or directly related field.
Minimum Experience:
5 years experience in an electric utility that includes experience with NERC standards and/or audits or cybersecurity, including 1 year prior lead/supervisory experience.
Licensing, Certifications, and Other Requirements:
Background check required to meet cybersecurity requirements. Depending upon assignment a WA driver’s license may be required. Equivalency: 1 year of experience = 1 year of education.
City of Tacoma Commitment to Diversity and Inclusion Tacoma embraces its multi‑cultural and multi‑ethnic character. Communities of color and immigrant communities are fundamental to Tacoma's entrepreneurial spirit, workforce, and long‑term success. We actively work to eliminate racial and other disparities and welcome candidates with diverse backgrounds and/or multicultural skill sets and experiences. The City of Tacoma is an Equal Opportunity Employer and values diversity in its workplace. Applicants are considered for positions without regard to race, color, religion, sex, national origin, ancestry, age, marital or veteran status, disability, sexual orientation, gender identity, or any other basis prohibited by federal, state, and local laws.
Tacoma Power Tacoma Power is an almost 100% hydroelectric, municipally‑owned public power utility, located in Tacoma. We serve approximately 180,000 customers as one of the three operating divisions of Tacoma Public Utilities, alongside Tacoma Water and Tacoma Rail.
Apply Interested individuals should apply online and attach a detailed resume and cover letter that includes job experience, major responsibilities and accomplishments related to this position. Applications will be reviewed as they are received for interview consideration. Reference checks will be conducted on final candidates and appointment is subject to passing a background check.
We primarily communicate via e‑mail during the application process. Emails from cityoftacoma.org and/or governmentjobs.com must be placed on your safe domain list to ensure that you receive notifications in a timely manner.
#J-18808-Ljbffr
Responsibilities
Manage the NERC Risk Management Program, which is comprised of the Compliance Assessment Procedure, Internal Controls Process, Reliability Risk Assessment Procedure, Closure of Compliance Recommendations Procedure, and Internal Investigations Procedure.
Provide direction and guidance to staff for timely and efficient implementation of the program.
Compliance Assessments.
Oversee compliance assessments, including internal audits, spot checks, and implemented controls assessments. Provide guidance and direction to staff on schedule, recommendations, and assessing risk and compliance.
Internal Controls.
Oversee the process to develop, inventory, assess, and monitor internal controls.
Reliability Risk Assessments.
Oversee risk assessment inputs to provide high, medium, and low risk ratings of all applicable NERC Reliability Standard requirements. Provide reporting and recommendations to Section Managers based on risk assessment outcomes for oversight and risk-based decision-making.
Closure of Compliance Recommendations.
Provide guidance to staff and stakeholders on recommendations and areas of concern. Resolve disputed recommendation issues between staff, Power Division Supervisors, and Assistant Power Division Section Managers.
Internal Investigations.
Initiate the Internal Investigation Procedure on potential compliance violations and bring findings before the Reliability & Compliance Governance Committee (RCGC) as appropriate. Ensure that all evidentiary documentation associated with a potential compliance violation is retained in accordance with all applicable retention requirements.
Develop and implement an annual schedule for Tacoma Power’s internal compliance assessments of NERC Reliability Standards and bring critical issues to the RCGC.
Assist the Reliability and Compliance Assistant Manager (RCAM) with managing Tacoma Power's response to periodic audits, spot checks, mandatory data submittals and exception reporting, pursuant to NERC and WECC's Compliance Monitoring Enforcement Program.
Supervise staff, including assigning, scheduling, monitoring, coordinating and verifying work or tasks; evaluating, training, developing and mentoring to improve skillsets and competencies.
Hold staff accountable and provide coaching, counseling, feedback recognition, awards, or discipline based on performance and measurable achievement.
Hire personnel, develop PDFs, and create onboarding plans.
Set and track goals with staff and perform periodic performance reviews.
Lead the Audit, Risk, and Controls group in fulfilment of their roles and responsibilities as documented in the Internal Compliance Program (ICP).
Qualifications Minimum Education:
Bachelor's degree in engineering, business administration or directly related field.
Minimum Experience:
5 years experience in an electric utility that includes experience with NERC standards and/or audits or cybersecurity, including 1 year prior lead/supervisory experience.
Licensing, Certifications, and Other Requirements:
Background check required to meet cybersecurity requirements. Depending upon assignment a WA driver’s license may be required. Equivalency: 1 year of experience = 1 year of education.
City of Tacoma Commitment to Diversity and Inclusion Tacoma embraces its multi‑cultural and multi‑ethnic character. Communities of color and immigrant communities are fundamental to Tacoma's entrepreneurial spirit, workforce, and long‑term success. We actively work to eliminate racial and other disparities and welcome candidates with diverse backgrounds and/or multicultural skill sets and experiences. The City of Tacoma is an Equal Opportunity Employer and values diversity in its workplace. Applicants are considered for positions without regard to race, color, religion, sex, national origin, ancestry, age, marital or veteran status, disability, sexual orientation, gender identity, or any other basis prohibited by federal, state, and local laws.
Tacoma Power Tacoma Power is an almost 100% hydroelectric, municipally‑owned public power utility, located in Tacoma. We serve approximately 180,000 customers as one of the three operating divisions of Tacoma Public Utilities, alongside Tacoma Water and Tacoma Rail.
Apply Interested individuals should apply online and attach a detailed resume and cover letter that includes job experience, major responsibilities and accomplishments related to this position. Applications will be reviewed as they are received for interview consideration. Reference checks will be conducted on final candidates and appointment is subject to passing a background check.
We primarily communicate via e‑mail during the application process. Emails from cityoftacoma.org and/or governmentjobs.com must be placed on your safe domain list to ensure that you receive notifications in a timely manner.
#J-18808-Ljbffr