Principal Cybersecurity Compliance Analyst

What You Will Do

---------------------

GFT

is seeking a Principal Cybersecurity Compliance Analyst to join our Security and Safety team in Northern Califonria! This role follows a hybrid work model, requiring regular attendance at our client's office. What you’ll be challenged to do:

As a Principal Cybersecurity Compliance Analyst, you will support critical compliance initiatives across a client’s generation assets. This role will focus on ensuring adherence to regulatory requirements, internal cybersecurity standards, and industry best practices. The ideal candidate will have a proven track record of managing compliance projects within highly regulated environments, particularly in the energy or utilities sector. In this capacity, the successful candidate will be responsible for the following:* Lead and support the development, implementation, and continuous improvement of governance, risk, and compliance (GRC) programs aligned with FERC (D2SI SPHP Section 9) and NERC CIP standards for PG&E’s power generation assets. * Develop, maintain, and operationalize policies, procedures, standards, and guidelines to meet regulatory requirements and industry best practices. * Conduct compliance gap assessments, risk analyses, and control testing for cybersecurity and OT systems. * Prepare and maintain audit-ready documentation, including compliance narratives, evidence repositories, and records retention practices. * Coordinate and support internal and external audits, including NERC Regional Entity audits, spot checks, and self-certifications. * Collaborate with cybersecurity, IT, OT, engineering, legal, and enterprise risk teams to align compliance requirements with business operations. * Serve as a liaison between technical teams and compliance leadership to translate regulatory requirements into actionable controls. * Track compliance metrics, risks, and issues; prepare reports and dashboards for leadership. * Monitor regulatory developments,...