Associate Cybersecurity Analyst, GRC

About the position

The Associate Cybersecurity Analyst, GRC, plays a crucial role within the Governance, Risk, and Compliance team of the Cybersecurity Department at CenterPoint Energy. This position focuses on developing and enhancing the company's cybersecurity controls, providing high-quality consulting on cybersecurity and risk management, and ensuring compliance with relevant regulations. The analyst will work closely with business leaders to identify risks and implement effective strategies to mitigate them, while also maintaining policies and standards across the organization.

Responsibilities

• Develop risk and compliance strategies and monitor cybersecurity controls.
• Provide cybersecurity and risk management consulting to business leaders.
• Implement a risk-based approach for evaluating technology requirements.
• Develop compliance activities in response to governance reviews.
• Collaborate with internal and external resources to address technology assessment findings.
• Maintain policies, procedures, baselines, and standards in collaboration with IT and business teams.
• Review vendor cybersecurity documents and ensure compliance with regulations.
• Promote productivity and teamwork through effective communication and leadership.
• Establish a 'Trusted Advisor' relationship with business leaders to understand risks and provide guidance.
• Identify new or emerging risks and develop mitigation plans.
• Provide technical leadership and expertise in cybersecurity across various technologies.

Requirements

• Bachelor's Degree in a business or technical discipline from an accredited college or university.
• Minimum of one year experience in cybersecurity, security auditing, or relevant IT role.
• Experience in data processing and analytics preferred.
• CISSP, CRISC, or other relevant certifications preferred.
• In-depth knowledge of technology risk assessments and risk management preferred.
• Demonstrated program and project management skills.
• Experience with common information security standards, such as NIST Cybersecurity Framework preferred.

Nice-to-haves

• Experience in data processing and analytics.
• CISSP, CRISC, or other relevant certifications.

Benefits

• Competitive pay
• Paid training
• Benefits eligibility begins on the first day
• Transit subsidies
• Flexible work schedule
• Paid holidays and paid time off
• Access to discounts at fitness clubs
• On-site wellness center at headquarters
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan with company match and contribution.