Physical Security Compliance Consultant – NERC-CIP Assessment

Physical Security Compliance Consultant – NERC-CIP Assessment

Curtis Bay, MD 21226 (Onsite)

6+ Months

Job Description:

Key Responsibilities:

1. Assessment Planning & Discovery

• Lead or participate in project kickoff meetings with client stakeholders
• Review and analyze existing security documentation, including PACS designs, visitor logs, incident reports, and prior audit data
• Evaluate the physical security integration with OT and IT systems
• Assist in developing pre-assessment checklists for site readiness

2. On-Site Security Evaluation

• Conduct 360-degree site walkthroughs and virtual security surveys
• Perform asset tagging and document physical control devices (badge readers, surveillance, access points)
• Execute zone-based analysis of perimeter and restricted areas
• Assess PACS effectiveness in alignment with CIP-006 requirements

3. Compliance Gap Analysis

• Perform structured evaluations against NERC CIP-006 and CIP-014 controls
• Evaluate perimeter defenses (signage, fencing, patrols)
• Optionally support adversarial simulations (tailgating, unauthorized access, blind spots)
• Draft preliminary findings and high-level recommendations

4. Reporting & Client Engagement

• Support the development of final reports including risk heatmaps and compliance roadmaps
• Prepare materials for client feedback sessions and executive presentations
• Present audit results and strategic remediation recommendations to senior leadership

Required Qualifications:

• 3+ years experience in physical security assessment, compliance, or critical infrastructure protection
• Familiarity with NERC CIP-006 and CIP-014 standards
• Experience conducting fieldwork at industrial or energy sector facilities
• Strong analytical, documentation, and communication skills
• Ability to interpret physical security architectures and PACS data
• Eligibility to work under NDA and undergo background checks

Preferred Qualifications:

• Experience with utilities, generation stations, or critical infrastructure
• Prior work on NERC CIP audits or gap assessments
• Certifications such as CPP (ASIS), PSP, or NERC credentials are a plus