Cybersecurity Senior Analyst GRC

CenterPoint Energy and its predecessor companies have been in business for more than 150 years.

Our Vision: Our vision is to become the most admired utility in the United States through the execution of our long-term growth strategy. We have an unwavering commitment to safely and reliably deliver electricity and natural gas to millions of people.

Our Commitment: CenterPoint Energy is committed to creating an inclusive work environment where business results are achieved through the skills, abilities and talents of our diverse workforce.

At CenterPoint Energy, individuals are respected for their contributions toward our company objectives. We strive for an inclusive work environment across all levels that is reflective of the available workforce in the communities we serve.

Summary

As the Senior Cybersecurity Analyst, GRC, you will be an integral member of the Governance, Risk and Compliance team within the Cybersecurity Department.

Essential Functions

• Develop and maintain core Governance, risk and compliance artifacts, including GRC program charter, cybersecurity service catalog and related documentation
• Establish and mature a cybersecurity metrics and reporting program, including cybersecurity metrics program charter, process, governance, and structure for metrics and data collection, developing reports and dashboards, and partner with control owners to analyze and report metrics
• Provide subject matter expertise on common control frameworks and lead efforts to create, improve, and monitor cybersecurity controls.
• Develop and maintain standards and SOPs (standard operating procedures) for third party risk management, solution risk assessments, exception management, and other GRC processes
• Conduct detailed security risk assessments (vendor and solution), and mature security risk assessment process including questionnaire development, workflow optimization in ServiceNow, risk analysis, and issue identification
• Produce high quality risk assessment reports and deliver readouts to business unit leaders, translating technical risks to clear business impacts and recommendations
• Review and analyze vendor cybersecurity documentation, including SIG questionnaires, SOC2 Type II, and other assurance artifacts
• Lead the end‑to‑end cybersecurity exception management process, including intake, validation, risk analysis, documentation, and routing for approval.
• Lead the design, development, and implementation of a consistent cyber risk treatment and monitoring process, including defining workflows, documenting standard and SOP, treatment plan requirements, and governance routines.
• Lead the risk treatment and monitoring activities, including maintaining the cyber risk register, validating risk scoring, tracking remediation progress, and ensuring risks are updated, reviewed, and closed in alignment with governance requirements.
• Work with control owners, system owners, SMEs, other internal and external resources to gather data, develop and oversee risk treatment options and action plans, to help drive and achieve results for technology related assessment findings and exception requests.
• Lead cybersecurity projects and initiatives, including project planning, stakeholder engagement, and progress reporting to leadership.
• Leverage and expand ServiceNow GRC capabilities to automate workflows, improve data quality, and enhance reporting

Responsibilities

• Strong understanding of information security risk management methodologies, third party risk management, and solution risk assessments
• ServiceNow GRC experience strongly preferred
• Promotes productivity and teamwork in assigned areas with open communication, timely decision making, and use of personal leadership skills to set high standards of performance while providing the direction necessary to achieve that performance.
• Develop "Trusted Advisor" relationship with business leaders to understand business and technical risks
• Identification of new or emerging risks and develop mitigation plans.
• Provide technical leadership and GRC subject matter expertise around use of technologies and business initiatives.
• Driven, energetic, team player with exceptional written and verbal communication skills with the ability to create clear, concise, and executive‑ready documentation.
• Superior customer service and interpersonal skills to effectively relate to end user experience and needs; ability to build working relationships and promote information-sharing. Possess a high degree of originality, creativity, initiative requiring minimal supervision.
• Proficiency with Microsoft Office (Word, PowerPoint, and Excel) and performing data analysis.
• Able to assess complex technologies and vendor risks/issues that require sophisticated analytical or problem-solving techniques to identify cause
• Able to provide professional input to complex assignments/projects as well as direction to more junior professionals
• Able to adapt to change, and sometimes competing priorities
• Able to prioritize and schedule tasks, pay attention to detail, and demonstrate good organizational skills.

Able to proactively follow up on action items and outstanding tasks

Education

Bachelor's Degree in a business or technical discipline from an accredited college or university is required.

Experience

• A minimum of 5 years' experience in cybersecurity, Governance, Risk and Compliance, security auditing, or relevant IT role working with cybersecurity concepts and tools is required.
• Experience in data processing and analytics preferred.
• CISSP, CRISC, or other relevant cybersecurity certifications preferred.
• In-depth knowledge and experience in technology risk assessments and information security risk management preferred.
• Demonstrated program and project management planning/execution skills
• Experience working with common information security standards, such as NIST Cybersecurity Framework (NIST) preferred and a plus

Physical Requirements

Working Conditions

We want you to know

Being a part of the CenterPoint Energy team is more than a career alone. Its an opportunity to make a positive impact. You will be an integral part of enabling everyday life and the pursuit of possibilities for the customers we serve and the communities we share. The vital services we provide are at the core of making our world work, and by sharing your energy with us, well create a better tomorrow together.

What we bring to you

• Competitive pay
• Paid training
• Benefits eligibility begins on your first day
• Transit subsidies
• Flexible work schedule, paid holidays and paid time off
• Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution

Job Type: Full Time

Posting Start Date: 04/08/2026

Posting End Date: 04/24/2026

This contractor and subcontractor shall abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin.

Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability.

#LI-CNP

Skills

Affirmative Action, Analysis Skills, CISSP - Certified Information Systems Security Professional, Communication Skills, Customer Support/Service, Data Analysis, Data Collection, Data Processing, Data Quality, Detail Oriented, Documentation, Electricity, Establish Priorities, Follow Through, Information/Data Security (InfoSec), Internet Security, Interpersonal Skills, Leadership, Metrics, Microsoft Excel, Microsoft Office, Microsoft PowerPoint, Microsoft Word, Natural Gas, Organizational Skills, Physical Demands, Presentation/Verbal Skills, Problem Solving Skills, Progress Reports, Project Planning, Project/Program Management, Quality Management, Regulations, Reporting Dashboards, Reporting Skills, Risk, Risk Analysis, Risk Management, Security Analysis, Security Auditing, ServiceNow, Standard Operating Procedures (SOP), Standards Development, Team Player, Technical Leadership, Technology Analysis, Time Management, Treatment Plan, U.S. National Institute of Standards and Technology (NIST), User Interface/Experience (UI/UX), Writing Skills

About the Company

CenterPoint Energy Inc