Senior GRC Automation & CCM Engineer - Cybersecurity

Marathon Petroleum Corporation; Findlay (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Marathon Petroleum Corporation is seeking a Senior Cybersecurity Engineer for GRC Automation & CCM to advance automated control testing and evidence collection across cloud, on-premises, and OT environments.

You will design deterministic test logic and AI-backed workflows, collaborating with Cyber Fusion, Enterprise Architecture, and Cyber Engineering to strengthen regulatory compliance and risk visibility.

Qualifications

• Bachelor’s Degree in Information Technology, related field or equivalent experience.
• 5+ years of relevant experience required.
• Experience designing, implementing, and scaling GRC, CCM, or compliance automation solutions within a regulated environment.
• Experience in Python or comparable automation technologies with REST API integrations.
• Hands-on experience integrating security-control data sources into a GRC/CCM evidence pipeline across multiple domains.

Responsibilities

• Conducts detailed analyses on changes to cybersecurity solutions and its relationship to internal and external systems to assess control effectiveness and cybersecurity risk.
• Leverages cybersecurity assessments and compliance frameworks to ensure controls across security systems.
• Improves the efficiency and effectiveness of security solutions, governance processes, and automated controls.
• Analyzes processes and leads improvements, automation opportunities, or remediation activities.
• Responsible for development and submission of Standard Operating Procedures.
• Analyzes events and evaluates control performance and risk indicators through continuous monitoring.
• Investigates cyber incidents, assists in risk mitigation and remediation plans to ensure compliance.
• Leads implementation of global security initiatives, collects and reports security metrics and remediation efforts.
• Manages cybersecurity-related consulting and guidance to stakeholders.
• Translates security principles to configuration teams to incorporate requirements into build processes.
• Monitors emerging IT/OT, cybersecurity, automation, and AI technologies and their impact on security and risk.

Skills

GRC automation

Security risk assessment

Analytical thinking

Education

Bachelor’s Degree in Information Technology or related field

Tools

Python

REST APIs

Azure AI Foundry

GitHub

Open-source frameworks

Job description

Marathon Petroleum Corporation is seeking a Senior Cybersecurity Engineer for GRC Automation & CCM to advance automated control testing and evidence collection across cloud, on-premises, and OT environments.

You will design deterministic test logic and AI-backed workflows, collaborating with Cyber Fusion, Enterprise Architecture, and Cyber Engineering to strengthen regulatory compliance and risk visibility.