> Markdown version of [/jobs/ext/1140751-information-security-compliance-analyst](https://www.wearedevelopers.com/jobs/ext/1140751-information-security-compliance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Compliance Analyst - **Company:** Eagle Creek Renewable Energy LLC - **Location:** Badin, NC, United States - **Contract:** Temporary contract - **Skills:** Antivirus Softwares, Cyber Security, Information Systems, Intrusion Detection Systems, Information Systems Security Architecture Professional, Network Monitoring, Software Vulnerability Management, Firewalls (Computer Science), Vulnerability Analysis - **Published:** July 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=82c0ae5d0b15ef19 ## About the Role + Bachelor's degree in information security, information systems, business, engineering, or a related field, or equivalent experience. + Proven experience in regulatory compliance, audit, GRC, or internal controls, ideally in electric utility, energy, or another regulated or critical-infrastructure environment. + Working knowledge of the NERC CIP compliance lifecycle, including self-certification, self-reporting, mitigation, and audit. * Compliance and Regulatory Knowledge: + In-depth knowledge of security technologies, such as firewalls, intrusion detection systems, antivirus software, encryption methods, and vulnerability scanning tools. + Familiarity with industry security standards and frameworks, including NERC CIP and NIST. * Analytical Skills: + Excellent analytical and problem-solving abilities to translate regulatory requirements into practical, defensible controls. + Ability to assess complex, multi-site environments and identify compliance gaps and risks. * Communication and Collaboration: + Strong written communication and documentation discipline to produce audit-ready evidence and clear compliance reporting. + Ability to collaborate and work cross-functionally with teams such as IT, operational technology, physical security, legal, and management. * Certifications (preferred): + Certified Information Systems Security Professional (CISSP). + Certified Information Systems Auditor (CISA). + Certified in Risk and Information Systems Control (CRISC). + Global Industrial Cyber Security Professional (GICSP) or NERC CIP compliance training. ## Description About the role: Eagle Creek Renewable Energy is seeking an experienced Information Security Compliance Analyst to join our team and help safeguard our organization's regulatory standing and the security of the critical generation assets across our fleet of hydropower facilities. The ideal candidate will have a strong background in monitoring network security, investigating breaches, and implementing strategies to maintain a secure environment in support of regulatory compliance, with the ability to translate complex requirements into clear, defensible, and well-documented controls. In addition, knowledge and experience with NERC CIP and NIST standards are essential for this role. What You'll Do: * Monitor networks for security breaches: Proactively monitor our organization's networks and systems to identify and respond to any security breaches or suspicious activities. Implement necessary measures to mitigate risks and ensure the integrity and confidentiality of our information. Conduct thorough investigations into security incidents, document findings, and create detailed reports for management. Collaborate with relevant teams to address identified vulnerabilities and recommend improvements to prevent future incidents. * Monitor regulatory change and perform gap analysis: Stay up to date with new and revised NERC standards, FERC orders, and relevant guidance, and assess their impact on our organization. Conduct gap analyses against current practice and translate regulatory change into actionable requirements for IT, security, and facility teams, tracking remediation to completion. * Develop and test internal controls and policies: Develop, maintain, and test internal controls and policies that demonstrate sustained compliance rather than point-in-time conformance. * Collaborate cross-functionally and report compliance status: Partner within IT and with operational technology and facility personnel to ensure controls are implemented, documented, and audit-ready. Produce compliance status reporting, metrics, and KPIs for leadership, and support incident reporting and recovery documentation requirements. * Support operational security and incident response: Support day-to-day security monitoring, vulnerability management, and the investigation of and response to security incidents, and help review proposed changes to systems and infrastructure for both security and compliance impact. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [YOLO Developer Workflows with a Coding Agent in a Box](https://www.wearedevelopers.com/videos/100350-yolo-developer-workflows-with-a-coding-agent-in-a-box) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Physical AI for the Next Wave of Industrial Digitalisation](https://www.wearedevelopers.com/videos/100039-physical-ai-for-the-next-wave-of-industrial-digitalisation) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)