Analyst Physical Security GRC 3

Pay Grade

15*

Deadline to Apply: October 31, 2025, at 11:59 p.m. CST
The 12-month requirement has been waived for this position. 
*Qualifications may warrant placement at a different job level. 

Position Summary

This position operates on a hybrid schedule, and applicants must reside within 120 miles of San Antonio, TX.
Integrated Security is responsible for the overall security of the company's personnel, physical and IT assets, and facilities. Based on security risks, Integrated Security establishes and continuously improves security policies, procedures & standards, infrastructure, human and technical preventive measures, employee security awareness, alarm, and incident response capabilities, etc., to safeguard the company's business operations.  This is an individual contributor position that develops and/or maintains security roles for access and compliance risk. business applications, analytic systems, third-party systems and responsible for managing application risk. The position also develops and/or maintains security operations and NERC-related processes, procedures and performs administrative tasks necessary to control several types of organizational risks, govern NERC requirements and security access authorizations. The position must also monitor and interpret the various regulatory statutes and protocols as well as coordinate and implement new initiatives related to governance, risk and compliance for internal and external audits.
 

Tasks and Responsibilities

• Internal physical access consultant for governance, risk, and compliance (GRC) activities.
• Collaborate in the development and implementation of programs, processes, and procedures used to support governance, risk, and compliance efforts.
• Responsible for analyzing and determining if a segregation of duties (SoD) conflict/risk exists within a group of transactions, and work with stakeholders to address risk.
• Collaborate with security staff, cross-functional teams, and business owners to ensure appropriate role, authorization, and access controls are in place that support security governance.
• Completes assigned compliance and operational risk testing activities in accordance with established timelines and high standards of quality.
• Under minimal guidance, conducts appropriate, independent testing to ensure operational risks and compliance requirements are adhered to.
• Understand, communicate and translate authorization concepts to business owners, and security staff.
• Develop security deliverables for enhancements to production systems.
• Utilize GRC tools to manage list of external authoritative sources, information technology controls, corporate policies and procedures, vendor management system, and risk management workflows.
• Acts as consultant on various regulatory standards and requirements impacting CPS Energy and the security organization.
• Collaborate with various business units to understand, resolve, or mitigate constraints impacting their operations and their risks associated with GRC controls.
• Consults on security risk and vulnerability assessment to proactively secure the organization.
• Acts as consultant on Physical Security Reviews.
• Prepares internal and external audit evidence.
• Ensures adherence of controls to maintain proficiency with applicable laws, regulations, and standards.
• Performs other duties as assigned.
   

Minimum Skills

Minimum Knowledge and Abilities

Preferred Qualifications

• Advanced knowledge of the Energy Sector (Gas and Electric)
• Advanced knowledge of GRC practices
• Security, GRC or audit related professional certifications
• Experience of State, local, and Federal law enforcement
• Excellent Presentation skills
   

Competencies

Minimum Education

Required Certifications

Working Environment

Physical Demands