Beusa Energy Group

Discussion

Cybersecurity Risk and Controls Analyst 1

Open 20d

Cybersecurity Risk and Controls Analyst

Job Description

Department: Information Technology

Job Status: Full Time

FLSA Status: Salary Exempt

Reports To: Cybersecurity Manager

Location: The Woodlands, TX

Amount of Travel Required: Less than 5%

Work Schedule: Monday Friday, 8am – 5pm

Positions Supervised: n/a

AIP: Level 7

POSITION SUMMARY:

Beusa Energy is seeking a Cybersecurity Risk & Controls Analyst to help build and scale our cybersecurity governance, risk, and compliance (GRC) program across both enterprise IT and operational technology (OT) environments.

This role is responsible for defining, implementing, and continuously improving the controls that protect Beusa Energy’s systems, infrastructure, and operations. You will translate cybersecurity risks and regulatory expectations into practical, enforceable controls that align with real world operating conditions in the energy sector.

As Beusa Energy continues to grow, this role will be central to ensuring cybersecurity is embedded into how we operate. You will help establish consistency, accountability, and visibility in how cybersecurity risk is identified, mitigated, and communicated across the organization.

ESSENTIAL FUNCTIONS: (The following duties and responsibilities are all essential job functions, as

defined by the ADA, except for those that begin with the word "may")

  • Identify, assess, and manage cybersecurity risks across IT and OT environments, maintaining a clear and actionable risk register.
  • Develop, implement, and maintain cybersecurity policies, standards, and procedures aligned with Beusa Energy’s risk profile and operational environment.
  • Design, document, and manage a centralized control framework that maps to industry standards (e.g., NIST CSF, ISO 27001) and regulatory requirements.
  • Lead and support enterprise risk assessments across IT and OT environments, including risk identification, analysis, tracking, and reporting.
  • Partner with IT, engineering, and field operations teams to ensure security controls are practical, implemented effectively, and embedded into daily workflows.
  • Support compliance initiatives and audits (e.g., SOC 2, ISO 27001), including control design, evidence collection, and audit coordination.
  • Maintain risk registers, control inventories, and remediation plans, providing clear visibility and reporting to leadership.
  • Support third-party risk management processes, including vendor risk assessments and ongoing monitoring.
  • Collaborate with cybersecurity and technology teams to align security tooling, monitoring, and detection capabilities with defined controls and compliance objectives.
  • Assist in developing and delivering security awareness, policy training, and control adoption initiatives.
  • Produce clear, executive-level reporting on risk posture, control effectiveness, and program maturity.
  • Continuously evaluate and improve governance processes, documentation, and control effectiveness to support a scalable cybersecurity program.
  • Performs other related duties as assigned to assist with successful operations and business continuity.
Show