Cybersecurity Risk & Compliance Analyst

NextEra Energy, Inc.; Saint Paul (MN); On-site; USD 88,000 - 132,000; Full time

Job summary

NextEra Energy is seeking a cybersecurity professional to support NEA’s risk management program and coordinate security assessments, third-party reviews, and application security evaluations. The role involves remediation tracking, governance reporting, and standardizing processes with AI-enabled tools to increase efficiency.

You will collaborate with engineering teams, vendors, and stakeholders to identify risks, document findings, and drive issues to resolution while maintaining secure

Qualifications

• Bachelor’s degree or equivalent practical experience in cybersecurity or related field.
• Experience supporting cybersecurity risk assessments, security compliance activities, or third-party risk management.
• Familiarity with cybersecurity controls, risk management concepts, vulnerability management, and remediation practices.
• Experience coordinating work across technical teams, business stakeholders, and external vendors.
• Strong organizational and communication skills for documentation and deadlines.
• Ability to explain cybersecurity risks to technical and nontechnical audiences.
• Experience with reporting and governance tools (GRC, workflow, ticketing).
• Knowledge of SAST, SCA, DAST, CI/CD and secure coding basics.

Responsibilities

• Administers information security sensors, logging, and detection mechanisms to identify threats.
• Develops cybersecurity subject-matter expertise for assigned technology stacks.
• Collaborates with security architecture to evaluate and recommend new technologies.
• Communicates activities, priorities and risk measurements to various levels.
• Guides security activities in SDLC and application development efforts.
• Performs other job-related duties as assigned.

Skills

Cybersecurity risk assessments

Vulnerability management

Application security reviews

Penetration testing support

GRC tools

Cross-functional collaboration

Reporting and documentation

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent

Tools

GRC tools

Ticketing systems

Dashboards

Job description

NextEra Energy is seeking a cybersecurity professional to support NEA’s risk management program and coordinate security assessments, third-party reviews, and application security evaluations. The role involves remediation tracking, governance reporting, and standardizing processes with AI-enabled tools to increase efficiency.

You will collaborate with engineering teams, vendors, and stakeholders to identify risks, document findings, and drive issues to resolution while maintaining secure