IT Compliance Analyst

IT Compliance Analyst

Non-Union Position | Change Mgmt & IT Compliance, Portland, Oregon (US-OR)

Hybrid schedule available for Oregon & Washington residents. Regular FT, Exempt. Posting # 5494.

At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation, and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry.

In addition to environmental stewardship, we are deeply committed to Diversity, Equity and Inclusion. Our DEI Council started 21 years ago, and we continue to foster a culture where all employees can experience belonging, shared purpose, and possibility.

Employees based at our Headquarters are required to work on‑site a minimum of two days per week. Specific in‑office days may vary by team and business needs. This hybrid schedule supports collaboration, connection, and engagement while also offering flexibility for remote work.

This position leads key IT compliance programs and ensures the company maintains an effective, well‑controlled technology environment aligned with regulatory and industry standards.

• Implement IT compliance strategies and evaluate efforts to ensure the effectiveness of NWN's IT control environment. Identify and solve complex problems that may involve multiple areas. Apply analysis, based on in‑depth research and critical thinking to recommend solutions.
• Manage several NWN compliance programs.
• Monitor the effectiveness of NWN controls that are directly related to compliance requirements.
• Monitor industry and regulatory trends to implement standard processes/methodologies.
• Conduct scoping reviews for new or updated compliance standards to determine the impact on NWN's control environment.
• Contribute to the development of the annual execution plan to implement cyber security related short‑ and long‑term goals.
• Be a liaison between business, IT, and audit organizations to set priorities for internal and external IT audits and attestations.
• Lead and coordinate resolution of high‑profile IT compliance issues with internal partners.
• Coordinate with internal team members and external contacts to identify requirements, communicate projects in flight, collect data and artifacts, and track progress.
• Develop, maintain, and deliver guidance and training to control owners as focus areas evolve or new audit and compliance requirements emerge.
• Deliver status updates to several levels of management throughout the organization on various IT compliance programs.
• Act as a lead and mentor to others on the IT Compliance team, providing leadership and guidance, acting as a back‑up to the department manager when needed. May assist with the review and evaluation of personnel.

• 8 years of professional work experience in technology or related field.
• 4 years of experience conducting technology audits or assessments.
• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing (e.g., SOX, SOC 1 & 2, PCI DSS, ISO 27001/2, Cloud Security Alliance, NIST 800‑53, MLPS 2.0, GDPR).

• Bachelor's Degree with 8+ years of professional work experience in technology or related field, or equivalent education and experience.
• Four (4)+ years of experience conducting technology audits or assessments.
• Any of the following certifications: CISA, CISSP, CISM, PCI QSA, or ISA.
• Experience securing cloud architecture and/or distributed networks.
• Previous work experience in a utility industry or professional services firm.

• Rich health insurance benefits with competitive employer contribution.
• Free access to an online wellness resources platform.

• Up to 23 vacation days.
• 80 hours of sick time.
• 10 paid holidays and 3 floating holidays.
• Flexible work arrangements.
• 3 weeks paid parental leave.
• Green Team,…