Senior Cybersecurity Engineer – GRC Automation & CCM

Marathon Petroleum Corporation; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401k match

Paid time off

Education reimbursement

Annual bonus

Job summary

Marathon Petroleum Corporation is seeking a GRC Automation & CCM Senior Cybersecurity Engineer to turn GRC into a trusted engine for the business. You will design automated evidence collection, control testing, risk intelligence, and AI-enabled governance across cloud, on-premises, and OT systems.

The role collaborates with Cyber Fusion, Enterprise Architecture, and Cyber Engineering to build deterministic control-testing logic and AI-backed workflows for attestation drafting and audit-package

Qualifications

• Bachelor’s degree in Information Technology or related field; equivalent experience.
• 5+ years of relevant experience in cybersecurity or governance roles.
• Experience designing, implementing, and scaling GRC/CCM and compliance automation in regulated environments.
• Proficient in Python or similar automation tech; REST API integrations across enterprise systems.
• Hands-on experience integrating security-control data sources into GRC/CCM evidence pipelines across multiple domains.
• Experience building LLM-backed agentic workflows on Azure AI Foundry, GitHub, or open-source frameworks.
• Familiarity with NIST AI RMF, OWASP LLM Top 10 or similar AI risk frameworks.

Responsibilities

• Conduct analyses on changes to cybersecurity solutions to assess control effectiveness and risk.
• Apply standards, control testing methodologies, and compliance frameworks to ensure security across systems.
• Improve efficiency of security solutions, governance processes, and automated controls.
• Lead improvements and automation opportunities; drive remediation activities.
• Develop and submit Standard Operating Procedures.
• Analyze events, investigate, and evaluate control performance and risk indicators.
• Investigate cyber incidents and assist in risk mitigation plans for compliance.
• Lead global security initiatives, report security metrics and remediation efforts.
• Provide cyber security guidance to customers and stakeholders.
• Translate security concepts for configuration teams to embed security in builds.
• Monitor emerging IT/OT, cybersecurity, and AI tech and assess impact on security.

Skills

AI Fundamentals

Cybersecurity Risk Management

Security Governance

SIEM

Threat Hunting

Vulnerability Management

General Programming

Intrusion Detection

Penetration Testing

Relationship Management

Security Controls

Security Policy Management

Threat Analysis

Adaptability

Change Management

Authentic Communicator

Education

Bachelor’s Degree in Information Technology

Tools

Azure AI Foundry

GitHub

Job description

Marathon Petroleum Corporation is seeking a GRC Automation & CCM Senior Cybersecurity Engineer to turn GRC into a trusted engine for the business. You will design automated evidence collection, control testing, risk intelligence, and AI-enabled governance across cloud, on-premises, and OT systems.

The role collaborates with Cyber Fusion, Enterprise Architecture, and Cyber Engineering to build deterministic control-testing logic and AI-backed workflows for attestation drafting and audit-package