Senior IT Compliance and Risk Analyst

Florida Power & Light; Juno Beach (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

Florida Power & Light Company is seeking a Senior IT Compliance and Risk Analyst to advance the cybersecurity governance, risk, and compliance program. You will develop, maintain, and oversee policies, standards, and procedures aligned to regulatory requirements and enterprise risk management.

The role focuses on governance activities including policy management, framework development, lifecycle documentation, stakeholder engagement, and governance reporting, while supporting risk management and

Qualifications

• High School Grad / GED.
• Bachelor’s or Equivalent Experience.
• Experience: 4+ years.
• Bachelor’s Degree (preferred).
• CISA certification (preferred).
• PMP (preferred).
• Six Sigma Green Belt (preferred).

Responsibilities

• Builds governance processes and metrics to track cyber risk and governance.
• Maintains and communicates cybersecurity policies, standards, and procedures.
• Supports risk assessments, remediation tracking, and audits.
• Ensures regulatory compliance through control validation and reporting.
• Engages stakeholders across the organization to drive governance.
• Develops training materials to promote compliance and risk awareness.
• Prepares documentation for audits and self-assessments.
• Performs other job-related duties as assigned.

Skills

Governance & policy

Risk assessment

Audit support

Regulatory compliance

Stakeholder engagement

Education

Bachelor’s Degree

CISA certification

PMP

Six Sigma Green Belt

High School Grad / GED

Experience: 4+ years

Job description

Requisition ID: 96424

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians.

With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy.

Want to be part of something powerful? Join our outstanding team and help shape the future of energy.

Position Specific Description

The Senior IT Compliance and Risk Analyst is responsible for supporting and advancing the cybersecurity Governance, Risk and Compliance program through the development, maintenance, communication, and oversight of cybersecurity policies, standards, programs, and procedures. This role serves as a key contributor to the organization's cybersecurity governance framework, ensuring alignment with business objectives, regulatory requirements, industry frameworks, and enterprise risk management practices. The position focuses primarily on governance activities, including policy and standards management, framework development, document lifecycle management, stakeholder engagement, and governance reporting. The role also supports cybersecurity risk management and compliance activities through assessments, issue remediation tracking, control validation, and audit support.

Job Overview

This job supports teams facilitating internal solution development across business units, to align Cybersecurity risk, leading technology solutions, and user experience. This position is responsible for various aspects of achieving compliance of cybersecurity including developing, implementing and enforcing IT policies, standards, methodologies and awareness using a risk based approach. Employees in this role develop a deep understanding of NextEra’s technology footprint, technology strategy, threat landscape and risks, to establish a collective Cyberstrategy.

Job Duties & Responsibilities

• Builds processes and tools to provide the business visibility of cybersecurity risks and drive accountability
• Develops and maintains policies, standards, processes, and procedures to assess, monitor, report, elevate and remediate cyber risk while maintaining corporate compliance with mandated security regulations
• Assesses and reviews security and controls to ensure sustainable regulatory compliance
• Develops processes and monitoring to identify, quantify, analyze, and report risk and compliance status
• Coordinates cyber risk management efforts including identification, assessment, tracking and resolution of risk management activities across all levels of the organization
• Assists with training, including training material development and deployment to ensure that compliance and risk becomes a sustainable business practice
• Gathers and prepares documentation to support audits, self-assessments, data requests, etc.
• Performs other job-related duties as assigned

Required Qualifications

• High School Grad / GED
• Bachelor’s or Equivalent Experience
• Experience: 4+ years

Preferred Qualifications

• Bachelor’s Degree
• Certified Information Systems Aud (CISA) certification
• Project Management Professional (PMP)
• Six Sigma Green Belt Certified

NextEra Energy offers a wide range of benefits to support our employees and their eligible family members.

Employee Group: Exempt

Employee Type: Full Time

Job Category: Information Technology

Organization: Florida Power & Light Company

Relocation Provided: No

NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law.

NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e‑mail to recruiting‑[e-mail] , providing your name, telephone number and the best time for us to reach you.

NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies. Please see our policy for more information.