Cybersecurity Analyst

This role ensures cybersecurity efforts are not only executed effectively, but also measurable, traceable, and defensible. The Cyber Security Analyst will help structure and maintain the processes, data, and documentation required to support security operations, risk and remediation tracking, control validation, and compliance readiness.

The analyst will work across engineering, operations, OT and IT security teams, and regulatory and compliance stakeholders to maintain asset and system visibility, support security reviews and assessments, validate security controls, track vulnerabilities and remediation activities, and ensure documentation and reporting are audit-ready and reliable.

Success in this role will be demonstrated through accurate and accessible asset inventory and system data, consistent and repeatable security processes, effective tracking of risks and vulnerabilities through closure, verified and defensible security controls, and reliable, audit-ready documentation and reporting.

• Organize and maintain asset and system visibility.

• Coordinate and support internal audits, external assessments, and third-party security reviews.

• Support administration of OT security platforms.

• Validate and test that security controls are implemented and operating as intended.

• Develop reporting and dashboards to provide insight into risk and compliance posture.

• Coordinate cybersecurity processes across engineering, operations, and security teams.

• Participate in risk assessments for new or evolving technologies, systems, and third-party services.

• Track the progress of security reviews, vulnerability remediation, and configuration and change activities.

• Ensure defined processes, including risk assessments, approvals, and reviews, are consistently followed.

• Coordinate security reviews, remediation efforts, and assurance activities.

• Identify gaps in workflows and contribute to process improvements.

• Maintain and support accurate inventory of OT and digital assets across environments.

• Organize system-level information, including ownership, network relationships, and configuration baselines.

• Support configuration monitoring efforts by identifying and validating changes within control systems.

• Administer and support OT security platforms used for asset visibility, configuration monitoring, vulnerability management, and threat detection.

• Assist with tuning and improving platform outputs to reduce noise and improve usability.

• Monitor and report on ongoing compliance with internal standards and external frameworks.

• Identify, assess, and track vulnerabilities through remediation.

• Support incident response activities by organizing information, tracking actions, and assisting coordination.

• Validate that remediation actions are completed and effective.

• Develop and maintain dashboards and reports related to asset visibility, vulnerability status, configuration changes, control effectiveness, and compliance posture.

• Track and report control gaps, deficiencies, and remediation status to support assurance and audit readiness.

• Support audit, compliance, and assurance activities by maintaining documentation, organizing and maintaining evidence, supporting control walkthroughs and documentation, and tracking requirements aligned with frameworks such as NIST, ISO 27001, NERC CIP, or similar.

• Provide clear, structured reporting to stakeholders and leadership.

• Develop and maintain Standard Operating Procedures (SOPs), process documentation, security guidelines, and internal standards.

• Ensure documentation is consistent, current, and aligned across teams.

• Support enforcement and adoption of security policies and standards across teams.

• Work closely with engineering and product teams, operations and field personnel, OT and IT security teams, and regulatory and compliance stakeholders.

• Facilitate communication and ensure alignment between technical teams and security processes.

• Bachelor’s Degree or equivalent education in Computer Science, Information Systems, Information Security, or another Information Technology-related field.

• 3–7 years of experience in OT cybersecurity, IT security, GRC, or operational environments.

• Experience in industrial, energy, or regulated environments preferred.

• Experience supporting OT security programs in regulated environments is preferred.

• Exposure to audit processes and compliance reporting is preferred.

• Familiarity with additional OT monitoring or detection tools is preferred.

• Experience in energy, utilities, or oil & gas sectors is preferred.