IT Compliance & Cyber Risk Leader

Florida Power & Light; Juno Beach (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

Florida Power & Light Company is seeking a Senior IT Compliance and Risk Analyst to advance the cybersecurity governance, risk, and compliance program. You will develop, maintain, and oversee policies, standards, and procedures aligned to regulatory requirements and enterprise risk management.

The role focuses on governance activities including policy management, framework development, lifecycle documentation, stakeholder engagement, and governance reporting, while supporting risk management and

Qualifications

• High School Grad / GED.
• Bachelor’s or Equivalent Experience.
• Experience: 4+ years.
• Bachelor’s Degree (preferred).
• CISA certification (preferred).
• PMP (preferred).
• Six Sigma Green Belt (preferred).

Responsibilities

• Builds governance processes and metrics to track cyber risk and governance.
• Maintains and communicates cybersecurity policies, standards, and procedures.
• Supports risk assessments, remediation tracking, and audits.
• Ensures regulatory compliance through control validation and reporting.
• Engages stakeholders across the organization to drive governance.
• Develops training materials to promote compliance and risk awareness.
• Prepares documentation for audits and self-assessments.
• Performs other job-related duties as assigned.

Skills

Governance & policy

Risk assessment

Audit support

Regulatory compliance

Stakeholder engagement

Education

Bachelor’s Degree

CISA certification

PMP

Six Sigma Green Belt

High School Grad / GED

Experience: 4+ years

Job description

Florida Power & Light Company is seeking a Senior IT Compliance and Risk Analyst to advance the cybersecurity governance, risk, and compliance program. You will develop, maintain, and oversee policies, standards, and procedures aligned to regulatory requirements and enterprise risk management.

The role focuses on governance activities including policy management, framework development, lifecycle documentation, stakeholder engagement, and governance reporting, while supporting risk management and