IT Compliance Analyst

• Support day-to-day IT and cybersecurity compliance activities, including documentation, data validation, tracking, and reporting.
• Assist with monitoring and supporting the Industrial Defender platform, including basic troubleshooting and issue tracking.
• Maintain and validate asset inventories, configuration information, vulnerability records, and supporting compliance documentation.
• Generate and organize compliance reports and documentation for internal reviews, self-assessments, and regulatory audits.
• Monitor asset changes, configuration modifications, and vulnerability findings that may have compliance implications.
• Track remediation activities and follow up with OT engineering, cybersecurity, infrastructure, and other technical teams.
• Validate and reconcile asset information across OT environments, including SCADA, PLC, RTU, and DCS technologies.
• Support evidence collection, documentation management, and audit-readiness activities.
• Identify opportunities to improve compliance reporting, documentation, and asset-management processes.
• Support identification and tracking of compliance gaps and corrective actions.
• Maintain accurate records and documentation for compliance requirements and audit traceability.
• Develop working knowledge of NERC CIP requirements and their application within OT and utility environments.

IT Compliance Analyst to support Operational Technology (OT) cybersecurity and compliance activities. This is an early-career opportunity for someone with 0-3 years of experience in IT compliance, cybersecurity, IT audit, risk management, governance, or a related area who is interested in developing expertise in North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), OT environments, and compliance technologies. This is a 12-month contract role with a hybrid schedule requiring onsite work Tuesday and Wednesday in Rosemead., * 0-3 years of professional experience in IT compliance, cybersecurity, IT audit, governance, risk management, information security, or a related technology field. Relevant internships or comparable experience may be considered.

• Foundational understanding of IT controls, cybersecurity, risk, compliance, or audit concepts.
• Ability to review, organize, validate, and maintain technical or compliance-related information.
• Strong documentation skills and attention to accuracy and detail.
• Strong analytical, organizational, and problem-solving skills.
• Ability to track issues, follow up on outstanding items, and maintain accurate records.
• Ability to communicate and collaborate effectively with technical and non-technical stakeholders.
• Interest in developing knowledge of NERC CIP, OT cybersecurity, industrial control systems (ICS), and regulatory compliance.
• Exposure to NERC CIP requirements, Industrial Defender, OT/ICS environments, utilities or other regulated environments, compliance audits, evidence collection, control testing, or risk assessments is preferred.
• Familiarity with the Purdue Model or industrial network segmentation concepts is preferred.
• Security , CISA, GICSP, or NERC CIP-focused coursework or training is a plus.

Tools and Technologies:

• Industrial Defender
• SCADA (Supervisory Control and Data Acquisition)
• PLC (Programmable Logic Controller)
• RTU (Remote Terminal Unit)
• DCS (Distributed Control System)
• Claroty
• Nozomi Networks
• Dragos
• Tenable.ot
• NERC CIP
• Purdue Model / industrial network segmentation