AI-Enabled Cybersecurity Risk & Governance Analyst

NextEra Energy; Saint Paul (MN); On-site; USD 88,000 - 132,000; Full time

Job summary

NextEra Energy, based in Minnesota, seeks a cybersecurity professional to advance NEA’s risk management program. You will coordinate assessments, third-party reviews, and security testing across engineering, vendors, and business units.

The role emphasizes AI-enabled analysis, governance, and remediation tracking to improve security posture. Responsibilities include coordinating penetration testing, documenting findings, and driving risk decisions.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent practical experience.
• Experience supporting cybersecurity risk assessments, security compliance activities, application security reviews, or third-party risk management.
• Familiarity with cybersecurity controls, risk management concepts, vulnerability management, and remediation practices.
• Experience coordinating work across technical teams, business stakeholders, and external vendors.
• Strong organizational skills with the ability to manage documentation, findings, deadlines, and multiple concurrent assessments.
• Strong written and verbal communication skills, including the ability to explain cybersecurity risks to both technical and nontechnical audiences.
• Experience using reporting, workflow, ticketing, governance, risk, and compliance tools.
• Familiarity with GRC, workflow, or case management tools used for risk tracking and remediation.
• Experience with vulnerability management, security review coordination, or penetration test support.
• Basic familiarity with application security and DevSecOps concepts such as SAST, SCA, DAST, CI/CD, and secure coding.
• Ability to use AI assistants and related technologies responsibly to improve analysis, documentation, and workflow efficiency.
• Ability to validate AI-assisted outputs and handle sensitive information appropriately.

Responsibilities

• Administers, operates and monitors NextEra Energy information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats.
• Develops a subject matter expertise for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools).
• Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture.
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels.
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts.
• Performs other job-related duties as assigned.

Skills

Cybersecurity risk management

Security assessments

Third-party risk

Application security

Penetration testing

Vulnerability management

Stakeholder coordination

Communication skills

GRC tools

DevSecOps concepts

Education

Bachelor’s degree or equivalent in Cybersecurity/IT/CS/Risk Management

Tools

SAST

SCA

DAST

CI/CD

Job description

NextEra Energy, based in Minnesota, seeks a cybersecurity professional to advance NEA’s risk management program. You will coordinate assessments, third-party reviews, and security testing across engineering, vendors, and business units.

The role emphasizes AI-enabled analysis, governance, and remediation tracking to improve security posture. Responsibilities include coordinating penetration testing, documenting findings, and driving risk decisions.