Senior Cybersecurity Analyst, OT Compliance

Marathon Petroleum; Findlay (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

Marathon Petroleum in Findlay, OH seeks a Senior Cybersecurity Analyst, OT Compliance to lead cybersecurity compliance across OT environments. You will ensure adherence to corporate standards, regulatory requirements, and industry frameworks while safeguarding industrial control systems and critical assets.

The role partners with Operations, Engineering, Digital, Audit, and Cybersecurity teams to assess controls, drive remediation, and support audit readiness with a focus on governance, asset

Qualifications

• Bachelor's degree in information technology and/or equivalent experience.
• 5+ years of relevant cybersecurity experience in OT/industrial environments.
• Professional cybersecurity certifications preferred.

Responsibilities

• Lead compliance activities for OT cybersecurity across operations.
• Assess security controls and coordinate remediation efforts.
• Support audits and ensure regulatory readiness and governance.
• Develop security metrics and monitor control effectiveness.
• Collaborate with Operations, Engineering, Digital, Audit, and Cybersecurity teams.

Skills

Adaptability

AI Fundamentals

Education

Bachelor's degree in information technology or related field

Professional certifications (Security+, Network+, OSCP, GIAC, CEH, CISA, CISM, CISSP)

Job description

An exciting career awaits you

At MPC, we're committed to being a great place to work - one that welcomes new ideas, encourages diverse perspectives, develops our people, and fosters a collaborative team environment.

Position Summary

The Senior Cybersecurity Analyst, OT Compliance is responsible for leading cybersecurity compliance, governance, and risk management activities across Operational Technology (OT) environments. This role ensures compliance with corporate cybersecurity standards, regulatory requirements, and industry frameworks while supporting the secure and reliable operation of industrial control systems, process control networks, and critical infrastructure assets. The position serves as a subject matter expert on OT cybersecurity compliance and works closely with Operations, Engineering, Digital, Audit, and Cybersecurity teams to assess security controls, conduct compliance evaluations, manage remediation efforts, and support audit readiness activities. The Senior Cybersecurity Analyst drives continuous improvement initiatives by identifying compliance gaps, coordinating corrective actions, and monitoring the implementation of OT security requirements aligned with applicable standards and regulations. This role provides guidance on cybersecurity risks, control effectiveness, and regulatory obligations while supporting enterprise initiatives related to governance, asset inventory, identity access management, and security monitoring within OT environments. The position plays a critical role in maintaining a resilient and compliant cybersecurity posture that protects operational assets, ensures regulatory compliance, and supports safe and reliable business operations. This position belongs to a family of jobs with increasing responsibility, competency, and skill level. Actual position title and pay grade will be based on the selected candidate's experience and qualifications.

Key Responsibilities

• Conducts detailed analyses on controls related to complex business processes and systems and relationship to other internal and external systems to assess business impact of the security issues.
• Drives the resolution of routine multi-functional technical issues. Oversees, advises on and manages Cybersecurity assessments and associated risks.
• Develops and evaluates efficiency and effectiveness of security processes and controls through creation and maintenance of detailed security and/or compliance reports, as necessary. Support user access certification and attestation programs by collecting and validating evidence, facilitating reviewer approvals, resolving exceptions, and maintaining documentation to support audit and compliance activities.
• Drive continuous improvement of OT cybersecurity compliance processes, tools, and controls to enhance regulatory compliance, audit readiness, and risk management.
• Analyzes and maintains security audits and reports, monitors security advisory groups, and assist with security incidents and intrusions. Support regulatory inspections, internal audits and external audits through evidence management, coordination activities, and issue resolution.
• Performs Incident Detection, Analysis, Response Planning, Containment, Eradication, Forensics and Reporting. Assists in the development of innovative and creative ideas to formulate risk mitigation and remediation plans and approaches to ensure compliance.
• Leads implementation of global security initiatives, policies, and compliance requirements. Develops and tracks metrics related to cybersecurity; use existing cybersecurity tools for running web application scanning, vulnerability scanning and external pentests and help with the remediation effort.
• Lead cybersecurity activities supporting SOX audits, including control testing coordination, evidence management, auditor engagement, issue resolution, and remediation tracking to ensure timely and successful audit outcomes.
• Manages cyber security-related consulting, guidance, and support to customers and stakeholders.
• Translates security principles to assist configuration teams with incorporating security into build and configuration processes.
• Monitors emerging Information Technology/Operations Technology and cybersecurity technologies as well as their impact on the security landscape.

Education and Experience

• Bachelor's degree in information technology, related field or equivalent experience.
• Professional certification, e.g. Security+, Network+, OSCP, GIAC, CEH, CISA, CISM CISSP preferred.
• 5+ years of relevant experience required.

Skills

• Adaptability - Maintaining effectiveness when experiencing major changes in work responsibilities or environment (e.g., people, processes, structure, or culture); adjusting effectively to change by exploring the benefits, trying new approaches, and collaborating with others to make the change successful.
• AI Fundamentals - Understanding of core AI concepts and methods, ability to apply AI to job-relevant use cases and capacity to contribute