Youssef El-Sayed Email & Phone Number

Boston, Ma, Us

Boston, Massachusetts, United States

I lead the Renewables NERC Compliance Program for CIP and O&P standards -Built out the Offshore Nerc Program for CIP and O&P-Ensure the compliance planning, operation, and protection of the Renewablesorganization according to all applicable NERC Reliability Standards.-Developed and maintaining a comprehensive NERC Compliance Program for the Renewables organization.-Implement new or revised Reliability Standard requirements within the organization.-Direct all aspects of compliance enforcement and mitigation activities on behalf of the business and in coordination with the regulatory agencies with jurisdictional oversight of Avangrid Renewables.-Communicate compliance matters across all levels of the organization to ensure adequate awareness and stakeholder engagement in compliance obligations is maintained.-Direct the preparation and coordination of all internal and external audits of NERC Standards.-Develop detailed material, information, and tools to improve consistency in NERC-CIP and O & P (693) compliance activities.-Cyber security , Governance Risk and Compliance- Generator owner (GO) and Generator Operator (GOP) Registrations - RTO/ISO-Registered new sites- Knowledge of national standards, regulations, technical cyber issues and diverse corporate requirements. - Implement oversight programs to evaluate the regional entity’s adherence to the NERC Rules of Procedure and Compliance Monitoring and Enforcement Program under direction of the Senior CIP Manager.- Support regional entity with NERC-CIP compliance program audits.- Develop detailed material, information, and tools to improve consistency in NERC-CIP compliance activities.-Perform quality assurance of evidence and provide support to compliance investigations- manage direct reports internally and externally-Archer GRC Tool - NERC CIP and O&P ( 693 )- Using internal controls daily in completing compliance work. -ISO New England

Detroit, Michigan, United States

Coordinate with internal business units toassist in the development of an effectivecyber risk management program.-Manage and mature a risk framework and processes that allow for effective cyber risk monitoring, management, and reporting.-Perform cyber risk assessments, evaluate, and prioritize cyber risk management activities across the organization.-Develop, implement, and perform third-party cyber security risk assessments based on cybersecurity standards.-Review third-party contracts and ensure they are in line with our organization's cyber risk tolerance.-Ensure third-party vendors are aware and comply with our organization's Cybersecurity policies and standards.-Managed 3 direct reports - Work with Legal to ensure cybersecurity requirements and external regulatory mandates are properly addressed in legal contracts.-Oversee the security of sensitive data across the organization and support in the design and implementation of information management controls to address identified risks.

Greater Detroit Area

• Knowledge of national standards, regulations, technical cyber issues and diverse corporate requirements. • Implement oversight programs to evaluate the regional entity’s adherence to the NERC Rules of Procedure and Compliance Monitoring and Enforcement Program under direction of NERC- CIP Lead Analyst or Manager.• Support regional entity with NERC-CIP compliance program audits.• Develop detailed material, information, and tools to improve consistency in NERC-CIP compliance activities.• Perform quality assurance of evidence and provide support to compliance investigations.• Provide technical expertise in support of IT teams and transmission and generation Operations Technology teams performing NERC-CIP compliance activities.• Assisted with process improvements, standard work instructions, and other continuous improvement efforts Technical feasibility exception (TFE) preparation and submittal; compliance evidence gathering, quality verification, packaging and storage. Cyber assets classification and validation. • Assess risk of security vulnerabilities, patches for servers and workstations, and assess the applicability and risk of newly discovered vulnerabilities. Liaise with System Administrators to remediate risk. Ensure Electronic/physical security controls adherence; and system security administration. • Perform periodic (annual, quarterly, monthly, weekly, daily) compliance activities as required.• Responsible for maintaining Security Privacy policies, processes and standards. Monitor and report out on non-compliance.• Assist in all risk-related activities of DTE Energy’s Security organization, including, planning, testing, reporting and recommending appropriate remediation measures.• Work with key stakeholders to understand data and reporting requirements• Updated and presented weekly metrics for team huddles• Facilitated Sustain meetings and interacted with other business units within DTE Energy

Jackson County, Michigan, United States

Bachelor'S Degree, Liberal Arts And Sciences, General Studies

Activities and Societies: Kappa Sigma Alpha, Wrestling Team, Greek Society, Student Government

Master Of Science - Ms, Computer And Information Systems Security/Information Assurance

High School Diploma