IT Compliance Analyst

Join to apply for the IT Compliance Analyst role at NW Natural
.

Hybrid schedule available for Oregon & Washington residents.

$86,500.00/yr – $/yr

At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry.

In addition to environmental stewardship, we’re also deeply committed to Diversity, Equity and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility.

NW Natural is recruiting for IT Compliance Analyst I/II/III positions. These positions will be reporting to the IT&S compliance manager and will work closely with IT&S Security and other technical, non‑technical teams as well as internal or external auditors. The primary purpose is to ensure the IT&S department is compliant with state and federal regulations by creating, monitoring, evaluating, and reporting on the effectiveness of operational controls within Information Technology (IT) and Industrial Control System (ICS) environments.

• Ensure company complies with all local, state and federal requirements.
• Perform and coordinate testing of key controls, document findings, and ensure controls are effectively designed and operating as intended.
• Collaborate with internal and external auditors to facilitate walkthroughs, evidence collection, and remediation tracking.
• Assist in the development and maintenance of IT compliance policies, procedures, and control frameworks.
• Monitor and report on control deficiencies, remediation plans, and risk mitigation strategies.
• Conduct security risk assessments of third‑party vendors, including review of SOC reports, security questionnaires, and contractual obligations.
• Evaluate vendor responses and identify potential risks or gaps in security controls.
• Work with business units and procurement to ensure vendors meet security and compliance standards.
• Maintain a centralized repository of vendor assessments and risk ratings.

• Bachelor’s degree in a related field or equivalent education/experience.
• Understanding of IT systems, applications, networks and databases.
• Knowledge of SOX and Operational Controls.
• 2+ years of experience in an IT compliance program and/or information security program for level 2. More advanced experience required for level 3, including managing more complex tasks, broader responsibilities, and increased autonomy in decision‑making or leading initiatives.
• Familiarity with SOX, NIST, ISO 27001, or similar regulatory frameworks.
• Experience with third‑party risk management tools and processes.
• Analytical, communication, and organizational skills.
• Ability to work independently and collaboratively in a fast‑paced environment.
• Understanding of assessing and designing internal and security controls.
• Experience in developing and submitting audit and compliance reports to governing bodies.
• Understanding of cloud security and modern IT environments.

• Experience in planning, organizing, and developing information technology policies, procedures, and practices.
• Ability to propose creative solutions to successfully remediate identified compliance issues.
• Certifications in one or more of the following areas preferred: CISA, CRISC, CISSP, and CISM.

Health & Wellness

• Rich health insurance benefits with competitive employer contribution
• Free access to an online wellness resources platform

Work Life Balance

• Up to 23 Vacation Days
• 80 Hours of Sick Time
• 10 paid holidays and 3 floating holidays
• 3 weeks paid parental leave
• Green Team / Diversity, Equity & Inclusion Council / Safety Team / Women’s Network and many other Employee Resource Groups
• 1500 sq foot exercise facility and secure bike room
• Meaningful annual incentive…