IT Compliance Analyst

IT Compliance Analyst to support Operational Technology (OT) cybersecurity and compliance activities. This is an early-career opportunity for someone with 0–3 years of experience in IT compliance, cybersecurity, IT audit, risk management, governance, or a related area who is interested in developing expertise in North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), OT environments, and compliance technologies.
This is a 12-month contract role with a hybrid schedule requiring onsite work Tuesday and Wednesday in Rosemead.

Responsibilities:

• Support day-to-day IT and cybersecurity compliance activities, including documentation, data validation, tracking, and reporting.
• Assist with monitoring and supporting the Industrial Defender platform, including basic troubleshooting and issue tracking.
• Maintain and validate asset inventories, configuration information, vulnerability records, and supporting compliance documentation.
• Generate and organize compliance reports and documentation for internal reviews, self-assessments, and regulatory audits.
• Monitor asset changes, configuration modifications, and vulnerability findings that may have compliance implications.
• Track remediation activities and follow up with OT engineering, cybersecurity, infrastructure, and other technical teams.
• Validate and reconcile asset information across OT environments, including SCADA, PLC, RTU, and DCS technologies.
• Support evidence collection, documentation management, and audit-readiness activities.
• Identify opportunities to improve compliance reporting, documentation, and asset-management processes.
• Support identification and tracking of compliance gaps and corrective actions.
• Maintain accurate records and documentation for compliance requirements and audit traceability.
• Develop working knowledge of NERC CIP requirements and their application within OT and utility environments.

Qualifications:

• 0–3 years of professional experience in IT compliance, cybersecurity, IT audit, governance, risk management, information security, or a related technology field. Relevant internships or comparable experience may be considered.
• Foundational understanding of IT controls, cybersecurity, risk, compliance, or audit concepts.
• Ability to review, organize, validate, and maintain technical or compliance-related information.
• Strong documentation skills and attention to accuracy and detail.
• Strong analytical, organizational, and problem-solving skills.
• Ability to track issues, follow up on outstanding items, and maintain accurate records.
• Ability to communicate and collaborate effectively with technical and non-technical stakeholders.
• Interest in developing knowledge of NERC CIP, OT cybersecurity, industrial control systems (ICS), and regulatory compliance.
• Exposure to NERC CIP requirements, Industrial Defender, OT/ICS environments, utilities or other regulated environments, compliance audits, evidence collection, control testing, or risk assessments is preferred.
• Familiarity with the Purdue Model or industrial network segmentation concepts is preferred.
• Security+, CISA, GICSP, or NERC CIP-focused coursework or training is a plus.

Tools and Technologies:

• Industrial Defender
• SCADA (Supervisory Control and Data Acquisition)
• PLC (Programmable Logic Controller)
• RTU (Remote Terminal Unit)
• DCS (Distributed Control System)
• Claroty
• Nozomi Networks
• Dragos
• Tenable.ot
• NERC CIP
• Purdue Model / industrial network segmentation