Cyber Security Compliance Lead — Controls & Audits

TXU Retail Services Company; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Vistra Corporate Services Company in Irving, Texas seeks a Lead Analyst for Cyber Security Compliance to develop, implement and maintain program procedures and tools. You will administer internal control systems, ensure evidence of compliance, and facilitate audits with internal teams and external partners.

The role requires 7–10 years of regulatory and security experience, with knowledge of NERC CIP, ERCOT, ISO 27001, NIST 800-53, and SOX.

Qualifications

• Experienced gained through college degree programs and/or certification in business or technology related field, or equivalent experience.
• 7-10 years' experience with understanding in NERC CIP, ERCOT Protocols, ISO 27001, NIST 800-53, SOX, PCI, NACHA.
• Demonstrate ability to learn quickly and facilitate agreement across diverse stakeholders.
• Working knowledge of cloud security and compliance best practices; professional certs a plus.

Responsibilities

• Perform duties with high accuracy; interpret regulations and design compliant processes.
• Support internal/external audits; investigate variances and drive root-cause analysis.
• Develop and manage corrective action plans; ensure documentation evidences compliance.
• Promote efficiency and automation within compliance controls while maintaining plant staff burden.

Skills

NERC CIP

ERCOT Protocols

ISO 27001

NIST 800-53

SOX

PCI

NACHA

PowerShell

Python

VBA

C++

Regulatory compliance

Stakeholder facilitation

Cloud security

CISM

CISA

CISSP

Education

Bachelor's degree in a relevant field

Tools

PowerShell

Python

VBA

C++

Job description

Vistra Corporate Services Company in Irving, Texas seeks a Lead Analyst for Cyber Security Compliance to develop, implement and maintain program procedures and tools. You will administer internal control systems, ensure evidence of compliance, and facilitate audits with internal teams and external partners.

The role requires 7–10 years of regulatory and security experience, with knowledge of NERC CIP, ERCOT, ISO 27001, NIST 800-53, and SOX.