Senior Security GRC & Compliance Lead

Xcel Energy; Denver (CO); Hybrid; USD 85,000 - 121,000; Full time

Benefits offered by this job

Annual Incentive Program

Medical/Pharmacy Plan

Dental

Vision

Life Insurance

401(k) plan

Paid time off

Job summary

Xcel Energy, a leading energy provider, is seeking a Senior Security Governance and Controls Analyst to lead policy and compliance governance initiatives, manage controls development, and drive risk-aware decision making. The role collaborates across security, IT, and business units to implement standards and improve program effectiveness.

The position emphasizes training delivery, metrics reporting, and regulatory liaison responsibilities within a hybrid work model, balancing onsite

Qualifications

• Bachelor’s degree or equivalent experience with at least 4 years in security/IT/OT fields.
• Three years of experience with control testing, policy implementation, audits, or risk management.
• GRC familiarity in a regulated environment (e.g., Utilities) preferred.

Responsibilities

• Lead development and maintenance of policy and compliance governance programs.
• Oversee security controls lifecycle, self-assessments, and risk identification.
• Develop and deliver training and awareness for the governance program.
• Produce security metrics and reporting for leadership and business units.
• Coordinate with stakeholders to ensure regulatory alignment and continuous improvement.

Skills

Security

GRC

Policy development

Risk management

Cross-functional collaboration

Education

Bachelor’s degree or equivalent experience

Tools

Archer

Job description

Xcel Energy, a leading energy provider, is seeking a Senior Security Governance and Controls Analyst to lead policy and compliance governance initiatives, manage controls development, and drive risk-aware decision making. The role collaborates across security, IT, and business units to implement standards and improve program effectiveness.

The position emphasizes training delivery, metrics reporting, and regulatory liaison responsibilities within a hybrid work model, balancing onsite