Senior Cybersecurity Engineer: GRC Automation & CCM

Marathon Petroleum Corporation; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Marathon Petroleum Corporation is seeking a Senior Cybersecurity Engineer focused on GRC Automation and Continuous Controls Monitoring (CCM). The role involves designing automated evidence collection, control testing, and AI-enabled governance across cloud, on-prem, and OT environments.

Collaboration with Cyber Fusion, Enterprise Architecture, and Cyber Engineering is essential to build deterministic and AI-driven workflows to support audits.

Qualifications

• Bachelor's degree or equivalent in IT or related field.
• 5+ years of relevant experience in cybersecurity governance, risk, and compliance.
• Experience designing, implementing, and scaling GRC/CCM solutions in regulated environments.
• Proficient in developing, integrating, and supporting automated workflows and REST API data integrations.

Responsibilities

• Conduct detailed analyses on cybersecurity solution changes and their relation to systems to assess control effectiveness and risk.
• Leverage assessments, standards, and control testing methodologies to ensure compliance across security systems.
• Improve efficiency and effectiveness of security solutions, governance, and monitoring capabilities.
• Lead improvements, automation opportunities, or remediation activities.
• Develop and submit Standard Operating Procedures.
• Monitor events, investigate incidents, and evaluate control performance and risk indicators.

Skills

Python automation

Automation workflows

GRC/CCM knowledge

Stakeholder communication

Education

Bachelor's Degree in IT

Tools

Azure AI Foundry

REST APIs

GitHub

Job description

Marathon Petroleum Corporation is seeking a Senior Cybersecurity Engineer focused on GRC Automation and Continuous Controls Monitoring (CCM). The role involves designing automated evidence collection, control testing, and AI-enabled governance across cloud, on-prem, and OT environments.

Collaboration with Cyber Fusion, Enterprise Architecture, and Cyber Engineering is essential to build deterministic and AI-driven workflows to support audits.