> Markdown version of [/jobs/ext/4549776-it-compliance-analyst](https://www.wearedevelopers.com/jobs/ext/4549776-it-compliance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Compliance Analyst

- **Company:** IS3 Solutions
- **Location:** Rosemead, CA, United States
- **Experience:** Starter
- **Contract:** Internship / Graduate position
- **Skills:** Cyber Security, Data Validation, Supervisory Control and Data Acquisition (SCADA), Issue Tracking Systems, Information Technology Audit, Network Segmentation, IT General Controls (ITGC), Process Control Systems, Operational Systems
- **Published:** November 3, 2026
- **Apply:** https://www.juju.com/job/16_3ae2db83

## About the Role

IT Compliance Analyst to support Operational Technology (OT) cybersecurity and compliance activities. This is an early-career opportunity for someone with 0-3 years of experience in IT compliance, cybersecurity, IT audit, risk management, governance, or a related area who is interested in developing expertise in North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), OT environments, and compliance technologies.
This is a 12-month contract role with a hybrid schedule requiring onsite work Tuesday and Wednesday in Rosemead., * 0-3 years of professional experience in IT compliance, cybersecurity, IT audit, governance, risk management, information security, or a related technology field. Relevant internships or comparable experience may be considered.

 * Foundational understanding of IT controls, cybersecurity, risk, compliance, or audit concepts.
 * Ability to review, organize, validate, and maintain technical or compliance-related information.
 * Strong documentation skills and attention to accuracy and detail.
 * Strong analytical, organizational, and problem-solving skills.
 * Ability to track issues, follow up on outstanding items, and maintain accurate records.
 * Ability to communicate and collaborate effectively with technical and non-technical stakeholders.
 * Interest in developing knowledge of NERC CIP, OT cybersecurity, industrial control systems (ICS), and regulatory compliance.
 * Exposure to NERC CIP requirements, Industrial Defender, OT/ICS environments, utilities or other regulated environments, compliance audits, evidence collection, control testing, or risk assessments is preferred.
 * Familiarity with the Purdue Model or industrial network segmentation concepts is preferred.
 * Security , CISA, GICSP, or NERC CIP-focused coursework or training is a plus.

Tools and Technologies:

 * Industrial Defender
 * SCADA (Supervisory Control and Data Acquisition)
 * PLC (Programmable Logic Controller)
 * RTU (Remote Terminal Unit)
 * DCS (Distributed Control System)
 * Claroty
 * Nozomi Networks
 * Dragos
 * Tenable.ot
 * NERC CIP
 * Purdue Model / industrial network segmentation

## Description

* Support day-to-day IT and cybersecurity compliance activities, including documentation, data validation, tracking, and reporting.
 * Assist with monitoring and supporting the Industrial Defender platform, including basic troubleshooting and issue tracking.
 * Maintain and validate asset inventories, configuration information, vulnerability records, and supporting compliance documentation.
 * Generate and organize compliance reports and documentation for internal reviews, self-assessments, and regulatory audits.
 * Monitor asset changes, configuration modifications, and vulnerability findings that may have compliance implications.
 * Track remediation activities and follow up with OT engineering, cybersecurity, infrastructure, and other technical teams.
 * Validate and reconcile asset information across OT environments, including SCADA, PLC, RTU, and DCS technologies.
 * Support evidence collection, documentation management, and audit-readiness activities.
 * Identify opportunities to improve compliance reporting, documentation, and asset-management processes.
 * Support identification and tracking of compliance gaps and corrective actions.
 * Maintain accurate records and documentation for compliance requirements and audit traceability.
 * Develop working knowledge of NERC CIP requirements and their application within OT and utility environments.