IT Compliance Analyst

Job Title: IT Compliance Analyst

Location: Rosemead, CA (Tuesday & Wednesday in office)

Duration: 12 Months Contract

Update: IT Compliance Analyst. NERC experience is a plus but not required, and Industrial Defender is no longer a must (but of course a plus if they have touched the platform).

We are seeking a NERC CIP Compliance Analyst with strong Industrial Defender experience to support the Operational Technology (OT) cybersecurity and compliance programs. This role will be responsible for leveraging Industrial Defender to support Tier 1 and Tier 2 operational activities, maintain compliance-related data, monitor system health, validate asset inventories, and provide audit-ready evidence in support of NERC CIP requirements.

The ideal candidate combines hands-on Industrial Defender platform experience with practical knowledge of NERC CIP compliance, industrial control systems, vulnerability management, and asset configuration management within regulated utility environments.

This position requires an individual who can quickly contribute to day-to-day support activities while partnering with cybersecurity, compliance, and OT engineering teams to maintain and improve organization''s compliance posture.

Key Responsibilities

• Provide Tier 1 and Tier 2 support for the Industrial Defender platform, including troubleshooting, monitoring, and issue resolution.

• Maintain and validate compliance data generated through Industrial Defender, including asset inventories, configuration baselines, and vulnerability assessment records.

• Generate and deliver compliance reports and supporting documentation for internal reviews, self-assessments, and regulatory audits.

• Monitor asset changes, configuration modifications, and vulnerability findings that may impact NERC CIP compliance.

• Coordinate remediation tracking and follow-up activities with OT engineering, cybersecurity, and infrastructure teams.

• Validate and reconcile asset information across industrial control system environments, including SCADA, PLC, RTU, DCS, and related OT technologies.

• Support evidence collection, documentation management, and audit preparedness activities.

• Assist with process improvements and automation opportunities within compliance and asset management workflows.

• Identify compliance gaps and collaborate with stakeholders to implement corrective actions.

• Maintain accurate records and documentation to support regulatory traceability and audit defensibility.

Required Qualifications

• 3+ years of experience supporting NERC CIP compliance, OT cybersecurity, industrial control systems, or related utility operations.

• Hands-on experience administering and supporting the Industrial Defender platform in a production environment.

• Experience using Industrial Defender for:

• Asset inventory management

• Configuration and change management

• Vulnerability assessment and reporting

• Compliance evidence generation

• Operational support and troubleshooting

• Working knowledge of NERC CIP standards, particularly those related to:

• Asset identification and management

• Configuration management

• Vulnerability management

• Evidence retention and audit readiness

• Understanding of OT/ICS environments, including SCADA, DCS, PLC, RTU, and related control system technologies.

• Strong analytical, documentation, and problem-solving skills.

• Ability to effectively work with technical and non-technical stakeholders in a regulated utility environment.

Preferred Qualifications

• Prior experience supporting electric utility or critical infrastructure environments.

• Experience supporting NERC CIP audit preparation, evidence collection, or regulatory assessments.

• Familiarity with additional OT cybersecurity platforms such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.

• Knowledge of the Purdue Model and industrial network segmentation concepts.

• Relevant certifications such as:

• GICSP

• CISA

• CISSP

• Security+

• NERC CIP-focused training or certifications