Georgia System Operations Corporation, located in Tucker, Georgia, has an excellent opportunity for an auditor with cyber security auditing experience.  The successful candidate will be hired at an appropriate level based on experience as described below.

Auditor: The Cyber Security & Regulatory Compliance Auditor will work in a team environment in coordination with the Georgia System Operations, Georgia Transmission and Oglethorpe Power Corporation (Family of Companies) regulatory compliance functions and the IT internal audit function to conduct internal controls testing,  compliance monitoring and provide consulting support to the Family of Companies.  The primary function is to provide assurance that cyber security risks are mitigated and ensure on-going compliance with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) reliability standards. 

This position is responsible for testing the design and effectiveness of internal controls developed to mitigate cyber security, information technology and NERC CIP risks, assessing the accuracy and timeliness of NERC CIP compliance evidence, working collaboratively with management and key stakeholders to develop action plans necessary for improvements, and monitoring completion of action plans developed.  This position will also prepare and issue reports to senior management that provide summary conclusions on audit objectives and detailed action plans developed for improvement. 

Sr. Auditor: The Sr. Cyber Security & Regulatory Compliance Auditor will work in a team environment in coordination with the Family of Companies compliance functions and the IT audit function to plan, coordinate, schedule, conduct and/or lead audits of internal controls, compliance monitoring and provide consulting support to the Family of Companies to provide assurance that cyber security risks are mitigated and ensure on-going compliance with NERC CIP reliability standards.

This position leads audit teams and/or independently conducts testing of the design and effectiveness of internal controls developed to mitigate cyber security, information technology and NERC CIP risks, assess accuracy and timeliness of NERC CIP compliance evidence, work collaboratively with management and key stakeholders to develop action plans necessary for improvements, and monitor completion of action plans developed.

This position will also prepare and issue audit reports to senior management that provide summary conclusions on audit objectives and detailed action plans developed for improvement.  The incumbent will act as a subject matter expert, solve complex problems work independently and identify solutions for improvements. 

Principal Auditor:  The Principal Cyber Security & Regulatory Compliance Auditor will work in a team environment in coordination with the Family of Companies regulatory compliance functions and the IT audit function to plan, coordinate, schedule, conduct and/or lead audits of internal controls, compliance monitoring and provide consulting support to the Family of Companies to provide assurance that cyber security risks are mitigated and ensure on-going compliance with NERC CIP reliability standards.  This position will perform the same duties as the Sr. Auditor position above at a more in-depth and advanced level, provides expertise in risk assessment and information technology and may serve in an advisory role to improve risk assessments, internal controls and strategic goals.