NERC CIP Compliance Analyst

Match Point is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome.

We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry specific best practices and expertise.

We are excited to be continuously expanding our team. We look forward to hearing from you!

We are seeking a NERC CIP Compliance Analyst with strong Industrial Defender experience to support the Operational Technology (OT) cybersecurity and compliance programs. This role will be responsible for leveraging Industrial Defender to support Tier 1 and Tier 2 operational activities, maintain compliance-related data, monitor system health, validate asset inventories, and provide audit-ready evidence in support of NERC CIP requirements.

The ideal candidate combines hands-on Industrial Defender platform experience with practical knowledge of NERC CIP compliance, industrial control systems, vulnerability management, and asset configuration management within regulated utility environments.

This position requires an individual who can quickly contribute to day-to-day support activities while partnering with cybersecurity, compliance, and OT engineering teams to maintain and improve organization's compliance posture.

• Provide Tier 1 and Tier 2 support for the Industrial Defender platform, including troubleshooting, monitoring, and issue resolution.
• Maintain and validate compliance data generated through Industrial Defender, including asset inventories, configuration baselines, and vulnerability assessment records.
• Generate and deliver compliance reports and supporting documentation for internal reviews, self-assessments, and regulatory audits.
• Monitor asset changes, configuration modifications, and vulnerability findings that may impact NERC CIP compliance.
• Coordinate remediation tracking and follow-up activities with OT engineering, cybersecurity, and infrastructure teams.
• Validate and reconcile asset information across industrial control system environments, including SCADA, PLC, RTU, DCS, and related OT technologies.
• Support evidence collection, documentation management, and audit preparedness activities.
• Assist with process improvements and automation opportunities within compliance and asset management workflows.
• Identify compliance gaps and collaborate with stakeholders to implement corrective actions.
• Maintain accurate records and documentation to support regulatory traceability and audit defensibility.

• 3+ years of experience supporting NERC CIP compliance, OT cybersecurity, industrial control systems, or related utility operations.
• Hands-on experience administering and supporting the Industrial Defender platform in a production environment.
• Experience using Industrial Defender for:
• Asset inventory management
• Configuration and change management
• Vulnerability assessment and reporting
• Compliance evidence generation
• Operational support and troubleshooting
• Working knowledge of NERC CIP standards, particularly those related to:
• Asset identification and management
• Configuration management
• Vulnerability management
• Evidence retention and audit readiness
• Understanding of OT/ICS environments, including SCADA, DCS, PLC, RTU, and related control system technologies.
• Strong analytical, documentation, and problem-solving skills.
• Ability to effectively work with technical and non-technical stakeholders in a regulated utility environment.

• Prior experience supporting electric utility or critical infrastructure environments.
• Experience supporting NERC CIP audit preparation, evidence collection, or regulatory assessments.
• Familiarity with additional OT cybersecurity platforms such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.
• Knowledge of the Purdue Model and industrial network segmentation concepts.
• Relevant certifications such as:
• GICSP
• CISA
• CISSP
• Security+
• NERC CIP-focused training or certifications

Match Point Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy…