Senior Security Governance & Controls Analyst - Hybrid

Xcel Energy Services Inc; Minneapolis (MN); Hybrid; USD 85,000 - 121,000; Full time

Benefits offered by this job

Annual Incentive Program

Medical/Pharmacy Plan

Dental

Vision

Life Insurance

401(k) plan

PTO

Job summary

Xcel Energy is seeking a Senior Security Governance and Controls Analyst to help develop and execute the security governance program across policies, controls, training, and metrics. You will collaborate with security teams and business units to implement controls and ensure regulatory compliance, including NERC CIP and SOX, while driving continuous improvement.

Responsibilities include leading policy reviews, mapping standards to regulations, performing control testing, and delivering reports

Qualifications

• Bachelor's degree or equivalent experience with at least 4 years in security or IT/OT.
• At least 3 years in control testing, security standards/policy implementation, audits, or risk management.
• GRC experience in a regulated environment preferred; can substitute for up to 18 months.

Responsibilities

• Lead development and maintenance of policy and compliance governance programs.
• Oversee security policies and standards lifecycle; manage review schedules.
• Develop and evaluate security controls, self-assessments, and risk identification.
• Produce management reports and metrics; support training and awareness.

Skills

Governance

GRC

Security Audits

Control Testing

Policy Implementation

Regulatory Compliance

Risk Management

Documentation

Communication Skills

Education

Bachelor's degree or equivalent experience

Tools

Archer

Job description

Xcel Energy is seeking a Senior Security Governance and Controls Analyst to help develop and execute the security governance program across policies, controls, training, and metrics. You will collaborate with security teams and business units to implement controls and ensure regulatory compliance, including NERC CIP and SOX, while driving continuous improvement.

Responsibilities include leading policy reviews, mapping standards to regulations, performing control testing, and delivering reports