GRC & IT Security Advisor: Governance, Risk & Compliance

Oxychem; Houston (TX); On-site; USD 95,000 - 130,000; Full time

Job summary

OxyChem is seeking an IT Audit & Governance, Risk & Compliance Senior Analyst to strengthen our cybersecurity posture across governance, risk, and compliance programs. You will partner with IT, Internal Audit, Legal, Compliance, HR, and business stakeholders to ensure risks are identified and managed effectively.

The role emphasizes policy development, audits, risk assessments, and security awareness initiatives to foster a compliant and security-conscious culture across the enterprise.

Qualifications

• Bachelor's degree in Cyber Security, Information Systems, Engineering, Finance or related field.
• CRISC, CISM, CISA, CGRC, or other governance, risk, and compliance certifications.
• 5+ years of experience in cybersecurity, governance, risk, compliance, information security, audit, privacy, or third-party risk management.
• Experience leading compliance programs, audits, risk assessments, or control implementation efforts.
• Experience using and supporting GRC, audit-management, vendor-risk-management, and workflow tools.
• Experience managing policies, control documentation, audit evidence, and remediation activities.
• Strong project-management skills, including the ability to prioritize competing compliance initiatives and drive cross-functional accountability.
• Exceptional written, verbal, and stakeholder-management skills.
• Ability to travel up to 20%.

Responsibilities

• Governance, Risk & Compliance (GRC): Implement and maintain cybersecurity governance, risk management, and compliance programs; conduct risk assessments; track remediation; support audits; ensure regulatory and contractual compliance; develop KRIs and KPIs; govern policies and third-party risk management.
• IT Audit & Compliance Management: Serve as primary cybersecurity liaison for audits; coordinate evidence collection and remediation; assess control effectiveness; support maturity benchmarking; report on compliance status and risk exposure.
• Security Awareness & Culture: Design and deliver Cybersecurity Awareness Program; manage phishing simulations; track metrics; promote a strong security culture in partnership with HR and Communications.
• Technical & Operational Support: Monitor threat intel; coordinate assessments, vulnerability testing; manage vendor relationships; support cloud and AI security risk initiatives; assist in incident reviews.

Skills

CRISC

CISM

CISA

CGRC

Education

Bachelor's degree

Job description

OxyChem is seeking an IT Audit & Governance, Risk & Compliance Senior Analyst to strengthen our cybersecurity posture across governance, risk, and compliance programs. You will partner with IT, Internal Audit, Legal, Compliance, HR, and business stakeholders to ensure risks are identified and managed effectively.

The role emphasizes policy development, audits, risk assessments, and security awareness initiatives to foster a compliant and security-conscious culture across the enterprise.