JORDAN STEWART

• Led peer reviews and lifecycle management for NERC CIP documentation (CIP-005, CIP-007 R1/R4, CIP-010 R4), ensuring regulatory alignment and formatting consistency.

• Coordinated with SMEs, managers, and approvers to drive timely updates; maintained project timelines and reviewer schedules to meet ARCS deadlines.

• Standardized document structure and implemented checklist-based quality controls for secure, compliant finalization and posting.

• Facilitated continuous review cycles and supported secure publishing of critical security documentation through cross-functional collaboration.

• Played a major role in the development of the processes section in the core document, outlining key processes such as scope management, tool implementation, and vulnerability scanning. Addressed comments and feedback from project partners to ensure the document met expectations.

• Entrusted with the SAST and SCA sections of the runbook, extracting relevant information from the client's SOP and meeting notes, and integrating it into the deliverable. Took full responsibility for formatting and supported team members in completing their sections.

• Drafted six RACI charts, including two for Pen Test and Responsible Disclosure, and four for Application Security, ensuring clarity and efficiency in task assignments.

• Assisted with comprehensive vulnerability assessments of Electronic Access Control and Monitoring Systems (EACMS) to ensure the security of High and Medium Impact BES Cyber Systems.

• Conducted in-depth cyber vulnerability evaluations of electronic access points and key Cyber Assets within the Electronic Security Perimeter, enhancing the protection of High and Medium BES Cyber Systems.

• Collaborated with cross-functional teams on projects related to analytics initiatives.

• Engaged in regular communication with team members to ensure alignment on goals.

• Conducted a NIST CSF Assessment for two LNG plants. Provided documentation and actionable recommendations about their enterprise-wide OT strategy after conducting site walk-downs and interviews with managers at a large LNG producer.

• Implemented enterprise guidance and asset inventory alignment across production facilities to establish a corporate baseline for asset inventory, network architecture, and cybersecurity. Facilitated interviews and workshops with domain subject matter experts.

• Analyzed and validated client cybersecurity policies, procedures, scoring, and recommendations during the C2M2 assessment.