Cybersecurity Analyst

Job Description

This role ensures cybersecurity efforts are not only executed effectively, but also measurable, traceable, and defensible. The Cyber Security Analyst will help structure and maintain the processes, data, and documentation required to support security operations, risk and remediation tracking, control validation, and compliance readiness. The analyst will work across engineering, operations, OT and IT security teams, and regulatory and compliance stakeholders to maintain asset and system visibility, support security reviews and assessments, validate security controls, track vulnerabilities and remediation activities, and ensure documentation and reporting are audit-ready and reliable.

Success in this role will be demonstrated through accurate and accessible asset inventory and system data, consistent and repeatable security processes, effective tracking of risks and vulnerabilities through closure, verified and defensible security controls, and reliable, audit-ready documentation and reporting.

Responsibilities

• Organize and maintain asset and system visibility.
• Coordinate and support internal audits, external assessments, and third-party security reviews.
• Support administration of OT security platforms.
• Validate and test that security controls are implemented and operating as intended.
• Develop reporting and dashboards to provide insight into risk and compliance posture.
• Coordinate cybersecurity processes across engineering, operations, and security teams.
• Participate in risk assessments for new or evolving technologies, systems, and third-party services.
• Track the progress of security reviews, vulnerability remediation, and configuration and change activities.
• Ensure defined processes, including risk assessments, approvals, and reviews, are consistently followed.
• Coordinate security reviews, remediation efforts, and assurance activities.
• Identify gaps in workflows and contribute to process improvements.
• Maintain and support accurate inventory of OT and digital assets across environments.
• Organize system-level information, including ownership, network relationships, and configuration baselines.
• Support configuration monitoring efforts by identifying and validating changes within control systems.
• Administer and support OT security platforms used for asset visibility, configuration monitoring, vulnerability management, and threat detection.
• Assist with tuning and improving platform outputs to reduce noise and improve usability.
• Monitor and report on ongoing compliance with internal standards and external frameworks.
• Identify, assess, and track vulnerabilities through remediation.
• Support incident response activities by organizing information, tracking actions, and assisting coordination.
• Validate that remediation actions are completed and effective.
• Develop and maintain dashboards and reports related to asset visibility, vulnerability status, configuration changes, control effectiveness, and compliance posture.
• Track and report control gaps, deficiencies, and remediation status to support assurance and audit readiness.
• Support audit, compliance, and assurance activities by maintaining documentation, organizing and maintaining evidence, supporting control walkthroughs and documentation, and tracking requirements aligned with frameworks such as NIST, ISO 27001, NERC CIP, or similar.
• Provide clear, structured reporting to stakeholders and leadership.
• Develop and maintain Standard Operating Procedures (SOPs), process documentation, security guidelines, and internal standards.
• Ensure documentation is consistent, current, and aligned across teams.
• Support enforcement and adoption of security policies and standards across teams.
• Work closely with engineering and product teams, operations and field personnel, OT and IT security teams, and regulatory and compliance stakeholders.
• Facilitate communication and ensure alignment between technical teams and security processes.

Qualifications

• Bachelor’s Degree or equivalent education in Computer Science, Information Systems, Information Security, or another Information Technology-related field.
• 3–7 years of experience in OT cybersecurity, IT security, GRC, or operational environments.
• Experience in industrial, energy, or regulated environments preferred.
• Experience supporting OT security programs in regulated environments is preferred.
• Exposure to audit processes and compliance reporting is preferred.
• Familiarity with additional OT monitoring or detection tools is preferred.
• Experience in energy, utilities, or oil & gas sectors is preferred.

About Us

Every day, the oil and gas industry’s best minds put more than 150 years of experience to work to help our customers achieve lasting success.

We Power the Industry that Powers the World

Throughout every region in the world and across every area of drilling and production, our family of companies has provided the technical expertise, advanced equipment, and operational support necessary for success—now and in the future.

Global Family

We are a global family of thousands of individuals, working as one team to create a lasting impact for ourselves, our customers, and the communities where we live and work.

Purposeful Innovation

Through purposeful business innovation, product creation, and service delivery, we are driven to power the industry that powers the world better.

Service Above All

This drives us to anticipate our customers’ needs and work with them to deliver the finest products and services on time and on budget.