Analyst-Cyber GRC, Sr.

Tallgrass-Energy; Lakewood (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Tallgrass Energy is seeking a Senior Analyst for Cyber GRC to enhance the company’s cybersecurity posture through risk assessment, control evaluation, and support for compliance obligations. The role advises business and technology teams to ensure cybersecurity requirements are understood, documented, and implemented effectively.

Additionally, this position reviews incoming contractual cybersecurity language and collaborates with Legal, Supply Chain, IT, Security Operations, Engineering, and

Qualifications

• No explicit qualifications stated in the provided excerpt.

Responsibilities

• Assess risk, evaluate controls, support compliance obligations, and recommend safeguards to reduce risk.
• Advise business and technology stakeholders to ensure cybersecurity requirements are understood and implemented.
• Review contractual cybersecurity language and collaborate with Legal, Supply Chain/Sourcing, IT, Security Operations, Engineering, and stakeholders on contract reviews and risk management.

Job description

Primary purpose:

• The Information Technology Governance, Risk, and Compliance (GRC) team supports Tallgrass’s cybersecurity risk and compliance program across the enterprise. This includes cyber risk management, policy and standards governance, third‑party risk management, contractual cybersecurity review, compliance monitoring, control assessments, security awareness, and audit readiness.

• The Senior Analyst, Cyber GRC supports the continued improvement of Tallgrass Energy’s cybersecurity posture by assessing risk, evaluating controls, supporting compliance obligations, and recommending practical safeguards to reduce risk. This role serves as a key advisor to business and technology stakeholders and helps ensure cybersecurity requirements are understood, documented, and implemented effectively.

• This position also serves as the security function’s primary reviewer of incoming contractual cybersecurity language and works closely with Legal, Supply Chain/Sourcing, IT, Security Operations, Engineering, and business stakeholders on contract reviews, obligation mapping, risk assessments, issue management, and control governance.