IT Compliance Analyst

IS3 Solutions
  • Rosemead, CA
  • Instant Apply
1 day ago

Job Description

IT Compliance Analyst to support Operational Technology (OT) cybersecurity and compliance activities. This is an early-career opportunity for someone with 0–3 years of experience in IT compliance, cybersecurity, IT audit, risk management, governance, or a related area who is interested in developing expertise in North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), OT environments, and compliance technologies.
This is a 12-month contract role with a hybrid schedule requiring onsite work Tuesday and Wednesday in Rosemead.

Responsibilities:
  • Support day-to-day IT and cybersecurity compliance activities, including documentation, data validation, tracking, and reporting.
  • Assist with monitoring and supporting the Industrial Defender platform, including basic troubleshooting and issue tracking.
  • Maintain and validate asset inventories, configuration information, vulnerability records, and supporting compliance documentation.
  • Generate and organize compliance reports and documentation for internal reviews, self-assessments, and regulatory audits.
  • Monitor asset changes, configuration modifications, and vulnerability findings that may have compliance implications.
  • Track remediation activities and follow up with OT engineering, cybersecurity, infrastructure, and other technical teams.
  • Validate and reconcile asset information across OT environments, including SCADA, PLC, RTU, and DCS technologies.
  • Support evidence collection, documentation management, and audit-readiness activities.
  • Identify opportunities to improve compliance reporting, documentation, and asset-management processes.
  • Support identification and tracking of compliance gaps and corrective actions.
  • Maintain accurate records and documentation for compliance requirements and audit traceability.
  • Develop working knowledge of NERC CIP requirements and their application within OT and utility environments.
Qualifications:
  • 0–3 years of professional experience in IT compliance, cybersecurity, IT audit, governance, risk management, information security, or a related technology field. Relevant internships or comparable experience may be considered.
  • Foundational understanding of IT controls, cybersecurity, risk, compliance, or audit concepts.
  • Ability to review, organize, validate, and maintain technical or compliance-related information.
  • Strong documentation skills and attention to accuracy and detail.
  • Strong analytical, organizational, and problem-solving skills.
  • Ability to track issues, follow up on outstanding items, and maintain accurate records.
  • Ability to communicate and collaborate effectively with technical and non-technical stakeholders.
  • Interest in developing knowledge of NERC CIP, OT cybersecurity, industrial control systems (ICS), and regulatory compliance.
  • Exposure to NERC CIP requirements, Industrial Defender, OT/ICS environments, utilities or other regulated environments, compliance audits, evidence collection, control testing, or risk assessments is preferred.
  • Familiarity with the Purdue Model or industrial network segmentation concepts is preferred.
  • Security+, CISA, GICSP, or NERC CIP-focused coursework or training is a plus.
Tools and Technologies:
  • Industrial Defender
  • SCADA (Supervisory Control and Data Acquisition)
  • PLC (Programmable Logic Controller)
  • RTU (Remote Terminal Unit)
  • DCS (Distributed Control System)
  • Claroty
  • Nozomi Networks
  • Dragos
  • Tenable.ot
  • NERC CIP
  • Purdue Model / industrial network segmentation

Numbers & Facts

LocationRosemead, CA

Skills

  • Analysis Skillsunmatched
  • Asset Managementunmatched
  • Auditingunmatched
  • CISA - Certified Information Systems Auditorunmatched
  • Communication Skillsunmatched
  • CompTIA Security+unmatched
  • Control Systemsunmatched
  • Corrective Actionunmatched
  • Data Qualityunmatched
  • Distributed Control Systems (DCS)unmatched
  • Document Managementunmatched
  • Documentationunmatched
  • Environmental Complianceunmatched
  • IT Governanceunmatched
  • Identify Issuesunmatched
  • Information Technology & Information Systemsunmatched
  • Information Technology/Systems Auditunmatched
  • Information/Data Security (InfoSec)unmatched
  • Internet Securityunmatched
  • Maintain Complianceunmatched
  • Operational Auditunmatched
  • Organizational Skillsunmatched
  • Problem Solving Skillsunmatched
  • Programmable Logic Controller (PLC)unmatched
  • Record Keepingunmatched
  • Regulationsunmatched
  • Regulatory Complianceunmatched
  • Riskunmatched
  • Risk Analysisunmatched
  • Risk Managementunmatched
  • Supervisory Control and Data Acquisition (SCADA)unmatched
  • Support Documentationunmatched
  • Technical Supportunmatched
  • Testingunmatched
  • Validation Documentationunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder