Security and Compliance Consultant (OT Regulatory Compliance)

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you’re looking for. Position Summary The IT Portfolio Lead - OT Regulatory Compliance within Enterprise Security Services (ESS) is responsible for the governance, oversight, and execution of compliance programs supporting Operational Technology (OT) environments, with a focus on NERC CIP and TSA security directives. This role establishes and maintains a systematic approach to managing regulatory obligations, including internal controls, audit readiness, evidence management, and continuous compliance monitoring across Technology and Security Services supported systems and programs. As part of ESS’s governance and oversight function, this position provides consultation to business units, application owners, and technology teams to ensure alignment with regulatory requirements and enterprise compliance objectives. The role assists in the completion of compliance assessments, control design and effectiveness reviews, and risk evaluations, delivering actionable insights to reduce regulatory risk and improve the maturity of the OT control environment. The IT Portfolio Lead - OT Regulatory Compliance partners closely with ESS stakeholders and cross-functional teams—including Technology Services, Transmission, and Generation—to ensure consistent implementation of compliance requirements and clear ownership of responsibilities across NERC CIP standards and related regulatory domains. The role drives accountability through the development and reporting of meaningful compliance metrics, dashboards, and insights that support leadership visibility into control performance, audit readiness, and remediation progress. This position is accountable for establishing, maintaining, and continuously improving ESS policies, procedures, tools (including governance, risk, and compliance platforms), and standardized processes that enable efficient execution of compliance activities. Leveraging industry best practices and regulatory guidance, the role ensures adherence to evolving NERC and TSA requirements and supports ESS and business areas in responding effectively to audits, inspections, and regulatory inquiries. Essential Responsibilities Operations Management: Provide strategic oversight and planning for ESS OT regulatory compliance programs, ensuring alignment with NERC CIP, TSA, and enterprise objectives. Lead compliance program execution across internal controls, assessments, standards implementation, and audit readiness activities. Utilize data analytics, control performance results, and audit insights to identify compliance risks and recommend mitigation strategies. Ensure the quality, integrity, and accuracy of compliance data, evidence, and reporting used for regulatory and leadership visibility. Process Management: Operate and continuously improve ESS compliance processes that support internal controls, evidence management, and regulatory reporting across OT environments. Drive strong audit and compliance outcomes by standardizing processes, reducing manual effort, and enhancing effectiveness of tools (e.g., GRC platforms such as Archer). Ensure processes are aligned to regulatory requirements and designed for sustainability, traceability, and defensibility during audits. Lead initiatives to improve usability of compliance tools, reporting, and workflows while incorporating industry best practices and lessons learned from audits and regulatory guidance. Training / Communications: Develop and deliver targeted training, guidance, and communications to application owners, control owners, and business stakeholders to ensure clear understanding of compliance responsibilities, regulatory requirements, and ESS processes. Support awareness and adoption of policies, procedures, and tools related to NERC CIP and TSA. Contribute to the development and tracking of compliance metrics and key performance indicators (KPIs) to measure process effectiveness, audit readiness, and overall program maturity. Relationship Management: Serve as a primary point of contact within ESS for compliance-related processes, fostering strong partnerships with Technology Services, Transmission, Generation, and other business areas. Act as a liaison between ESS and internal/external stakeholders, including auditors and regulators, to support audits, data requests, and compliance inquiries. Leverage stakeholder feedback and operational insights to continuously improve the effectiveness, efficiency, and user experience of compliance processes, tools, and governance practices. Minimum Requirements Seven years of related functional experience Bachelor's degree in technology, Science, Business or related field, or 4 years of experience equivalent to the position. Excellent communication skills, effective with varying organizational levels and skill set, and able to translate between technical and non-technical concepts. Excellent Relationship Management and collaboration skills, with a track record of working as one team cross-organizationally to drive innovation and business results Experience in IT, Supply Chain or Finance. Demonstrated experience in project management activities, including management of project financials and schedule. At least 2 years of experience using project management tools, techniques and communication processes, or equivalent demonstrated knowledge and skills. Expertise in policy and regulation compliance Demonstrated ability to work in a diverse, regulated and rapidly changing business environment Previous management of core business processes with proven ability to lean processes and cut waste and continuously improve solutions Demonstrated proficiency in using applicable process tools. Preferred Requirements At least 2 years of NERC CIP regulatory experience Experience with Archer GRC platform As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you’re ready to be a part of something big, we invite you to join our team. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Individuals with a disability who need an accommodation to apply please contact us at . Non-Bargaining The anticipated starting base pay for this position is: $97,600.00 to $138,600.00 per year This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part. In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information. Deadline to Apply: 06/21/26 EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination | Equal Opportunity Policy (PDF) | Employee Rights (PDF) All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility. ACCESSIBILITY STATEMENT Xcel Energy endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.