NERC CIP Compliance Analyst (Industrial Defender Administrator / Analyst) Rosemead CA Hybrid

Hi

Role: NERC CIP Compliance Analyst (Industrial Defender Administrator / Analyst)

Location: Onsite in Rosemead CA  (2-3 days per week

Contract: 12+ months

Key Responsibilities

• Provide Tier 1 and Tier 2 support for the Industrial Defender platform, including troubleshooting, monitoring, and issue resolution.
• Maintain and validate compliance data generated through Industrial Defender, including asset inventories, configuration baselines, and vulnerability assessment records.
• Generate and deliver compliance reports and supporting documentation for internal reviews, self-assessments, and regulatory audits.
• Monitor asset changes, configuration modifications, and vulnerability findings that may impact NERC CIP compliance.
• Coordinate remediation tracking and follow-up activities with OT engineering, cybersecurity, and infrastructure teams.
• Validate and reconcile asset information across industrial control system environments, including SCADA, PLC, RTU, DCS, and related OT technologies.
• Support evidence collection, documentation management, and audit preparedness activities.
• Assist with process improvements and automation opportunities within compliance and asset management workflows.
• Identify compliance gaps and collaborate with stakeholders to implement corrective actions.
• Maintain accurate records and documentation to support regulatory traceability and audit defensibility.

Required Qualifications

• 3+ years of experience supporting NERC CIP compliance, OT cybersecurity, industrial control systems, or related utility operations.
• Hands-on experience administering and supporting the Industrial Defender platform in a production environment.
• Experience using Industrial Defender for:
  • Asset inventory management
  • Configuration and change management
  • Vulnerability assessment and reporting
  • Compliance evidence generation
  • Operational support and troubleshooting
• Working knowledge of NERC CIP standards, particularly those related to:
  • Asset identification and management
  • Configuration management
  • Vulnerability management
  • Evidence retention and audit readiness
• Understanding of OT/ICS environments, including SCADA, DCS, PLC, RTU, and related control system technologies.
• Strong analytical, documentation, and problem-solving skills.
• Ability to effectively work with technical and non-technical stakeholders in a regulated utility environment.

Preferred Qualifications

• Prior experience supporting electric utility or critical infrastructure environments.
• Experience supporting NERC CIP audit preparation, evidence collection, or regulatory assessments.
• Familiarity with additional OT cybersecurity platforms such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.
• Knowledge of the Purdue Model and industrial network segmentation concepts.
• Relevant certifications such as:
  • GICSP
  • CISA
  • CISSP
  • Security+
  • NERC CIP-focused training or certifications