Job description:
About the Role
We are seeking an experienced Senior Security Engineer – Governance, Risk & Compliance (GRC) to join our growing cybersecurity team within the energy sector. This role is responsible for driving security governance initiatives, managing risk, and ensuring compliance with industry regulations and frameworks. The ideal candidate will have a strong background in GRC practices and the ability to translate complex technical environments into clear policies and standards.
Key Responsibilities
- Lead and manage the security governance and policy lifecycle, including development, review, and maintenance of policies, standards, and standard work instructions (SWIs)
- Conduct risk assessments and support enterprise risk management initiatives
- Perform control mapping across multiple regulatory and security frameworks
- Ensure compliance with key regulatory requirements including:
- NERC
- PCI
- TSA
- SOX
- GDPR
- Align organizational controls with established security frameworks such as:
- NIST Cybersecurity Framework (CSF)
- ISO-based controls
- Collaborate cross-functionally with IT, security, and business teams to ensure compliance objectives are met
- Utilize GRC tools (e.g., ServiceNow, SAP GRC) to track, manage, and report on compliance and risk posture
Required Qualifications
- 5–10 years of experience in Security Governance, Risk & Compliance (GRC)
- Strong understanding of:
- Policy vs. standards vs. procedures/SWIs
- Risk management methodologies
- Regulatory compliance requirements
- Hands-on experience with GRC platforms such as ServiceNow or SAP GRC
- Proven ability to perform risk assessments and control mapping
- Familiarity with NIST CSF and ISO-aligned frameworks
Soft Skills
- Excellent written and verbal communication skills
- Strong ability to develop technical policies and standards
- Ability to translate complex security concepts into clear business language
- Collaborative mindset with strong stakeholder engagement skills
Preferred Qualifications
- Experience in the utility, energy, or OT/IT environments
- Understanding of operational technology (OT) security principles
Why Join Us?
- Competitive salary up to $142K based on experience
- Flexible remote work environment
- Opportunity to work in a critical infrastructure sector
- Full health benefits package
- Career growth in a high-impact cybersecurity role
Job Types: Full-time, Contract
- Dental insurance
- Health insurance
- Vision insurance
