• Own the ongoing review and maintenance of organizational security policies, standards, and procedures. Assist in identifying policy gaps based on evolving regulatory requirements, business needs, and industry best practices. • Serve as a primary cross-functional coordinator with other dedicated compliance teams (e.g., Legal, Regulatory Affairs, Internal Audit) to design and maintain a unified, strategic governance roadmap that ensures all corporate compliance activities are aligned, documented, and consistently executed across the enterprise. • Lead security risk assessments for new and renewing third-party vendors third-party vendors as part of the procurement lifecycle. Track remediation items and collaborate with stakeholders to address identified risks. • Coordinate and support the organization's annual security audits and certifications (e.g., SOC 2, PCI, CIS). Coordinate evidence collection, track action items, communicate with stakeholders, and assist with audit readiness activities. Lead cross-functional coordination with internal SMEs to support evidence collection activities with internal SMEs to support the internal evidence gathering process across multiple departments, reviewing appropriateness, tracking action items, and ensuring timely submission of required documentation. • Assist with the administration and continuous improvement of the company’s security awareness and training program, including tracking completion metrics and updating training content as needed. • Work in close partnership with Legal and Regulatory teams to interpret new and changing compliance requirements. Provide security insight to ensure corporate practices and technology align with legal and regulatory mandates. • Proactively identify and drive improvements to the efficiency, consistency, and scalability of GRC processes of GRC processes and documentation. Contribute to initiatives that enhance operational maturity and reduce organizational risk. Ensuring internal tools and processes meet control objectives and reduce organizational risk. • Maintain and help evolve risk and issues registries, tracking exceptions, risk owners, update timelines, and supporting broader risk management initiatives across Security and IT functions.

• Assist with the coordination of translation of regulatory correspondence and submission documents such as protocols, synopsis, ICF and labels • Pack and dispatch regulatory submissions, site contracts, and site documents, follow up for delivery confirmation, obtain and file acknowledgement receipts and update relevant tracking tools • Perform administrative QC of regulatory submissions, site documents and site contracts to ensure correct completeness and formatting • Liaise with Finance requesting fee payment to Regulatory Authorities. Closely monitor the assigned Therapeutic mailbox and triage requests to the correct team members for prompt action

• Liaise with SAR colleagues to drive plan, organize, compile, progress, track, and submit regulatory submissions on a timely basis and with a consistently high level of quality. • May act as a contact point for translation review of submission documents such as applications, synopses, ICFs, labels, etc. • Maintain country-specific patient information sheet and consent form customization text. • Maintain country-specific drug labeling information and Country Intelligence Pages. • Review and make recommendations on all relevant documentation e.g. labels, patient information sheets, diary cards etc. to comply with ICH GCP & country-specific requirements.

Role Description TerraForm Power is seeking a NERC Compliance Engineer to support execution of the Company's NERC 693 Compliance Program across a growing fleet of renewable generation assets. This position independently interprets NERC Reliability Standards and applies them to company-owned generating facilities. The incumbent exercises professional judgment to identify compliance risks, evaluate evidence, recommend corrective actions, and partner with Operations, Engineering, Asset Management, and other stakeholders to ensure ongoing regulatory compliance. The position owns assigned compliance standards and regulatory activities from implementation through audit readiness while working within the Company's established compliance framework. Key Responsibilities - NERC Compliance - Independently execute assigned NERC 693 Reliability Standards, including PRC, MOD, VAR, FAC, PER and related requirements. - Interpret regulatory requirements and determine applicability to company assets. - Maintain consistent compliance execution across multiple operating regions while accounting for ISO and asset-specific differences. - Lead implementation activities for new and revised NERC Reliability Standards. - Serve as the owner for assigned compliance standards and associated program requirements. - Compliance Program Management - Maintain assigned compliance programs, documentation, and internal controls. - Perform compliance gap assessments and recommend corrective actions. - Develop process improvements that strengthen compliance execution and audit readiness. - Monitor emerging regulatory changes and recommend implementation strategies. - Audit & Evidence Management - Develop and maintain audit-ready compliance evidence. - Prepare and maintain RSAWs. - Coordinate responses to RFIs, audit requests, and regulatory inquiries. - Evaluate evidence for completeness and identify deficiencies requiring remediation. - Conduct internal compliance readiness reviews. - Mitigation & Issue Resolution - Analyze compliance findings and determine appropriate corrective actions. - Develop mitigation plans in partnership with Operations and Engineering. - Monitor mitigation milestones through successful closure. - Maintain tracking of compliance risks and outstanding actions. - Regulatory Reporting - Prepare assigned self-certifications and regulatory submissions. - Coordinate ISO and regional reporting requirements. - Ensure timely completion of compliance deliverables. - Partner with internal stakeholders to collect and validate required data. - Cross-Functional Collaboration - Partner with Operations, Engineering, Asset Management, and external regulatory organizations to ensure consistent application of compliance requirements. - Provide technical guidance regarding interpretation of NERC Reliability Standards. - Recommend improvements that reduce compliance risk and improve operational efficiency. Qualifications - Bachelor's degree in Engineering or a related technical discipline. - 4–7 years of experience supporting NERC compliance, power system engineering, electric utilities, or power generation. - Working knowledge of NERC Reliability Standards including PRC, MOD, VAR, FAC, and PER. - Experience supporting regulatory audits, RFIs, compliance reviews, and evidence management. - Strong analytical, organizational, and technical writing skills. - Ability to manage multiple priorities while working independently. - Experience supporting renewable generation facilities. - Experience working with ISO markets including ISO-NE, CAISO and ERCOT. - Knowledge of compliance management systems and audit documentation. Requirements - Compensation: $86,000 - $115,000 Recruitment Agency Notice TerraForm Power Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of TerraForm Power and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.