Entry-Level Cybersecurity Governance & Risk Analyst

Duke Energy; Charlotte (NC); Hybrid; USD 55,000 - 75,000; Full time

Job summary

Duke Energy is seeking an Associate Cybersecurity Governance & Risk Analyst in Charlotte, NC, to support governance, risk, and architecture tasks within a cybersecurity team. This entry-level position offers growth opportunities and exposure to TASR, SRT, CAR, and MSB/CMSB processes.

You will work under supervision to perform intake reviews, assist with risk assessments, and help maintain baselines and architecture documentation, with hybrid on-site/remote work arrangements after onboarding.

Qualifications

• Associate degree in Cybersecurity or related field required.
• Alternative: High School/GED plus 2 years related work experience.

Responsibilities

• Perform intake reviews for TASR/SRT and verify submissions against policies and standards.
• Assist with risk assessments and identify security gaps for senior architects.
• Coordinate with requestors to obtain missing documentation and evidence.
• Support vendor and technology due diligence activities and track workflow status.
• Document architecture requirements, decisions, risk dispositions, and follow-up actions.
• Contribute to CAR preparation, intake validation, and documentation quality reviews.
• Collect and analyze architecture performance metrics and support dashboard reporting.

Skills

Cybersecurity fundamentals

Written communication

Verbal communication

Time management

Analytical thinking

Collaboration

Education

Associate degree in Cybersecurity or related

High School/GED + 2 years related experience

Job description

Duke Energy is seeking an Associate Cybersecurity Governance & Risk Analyst in Charlotte, NC, to support governance, risk, and architecture tasks within a cybersecurity team. This entry-level position offers growth opportunities and exposure to TASR, SRT, CAR, and MSB/CMSB processes.

You will work under supervision to perform intake reviews, assist with risk assessments, and help maintain baselines and architecture documentation, with hybrid on-site/remote work arrangements after onboarding.