Specialist - IT Compliance

Energy Transfer LP
401(k), profit sharing
United States, Texas, Houston
Nov 14, 2024
Are you interested in joining our team? Chat with our digital assistant to learn more about our company and apply right from your mobile device! Text ETP to 25000 to get started or apply through this web posting if you prefer. Energy Transfer, recognized by Forbes as one of America's best large employers, is dedicated to responsibly and safely delivering America's energy. We are driven to inspire our employees to create superior value for our customers, our investors, a sustainable future and giving back to the community where we have long-standing commitments to causes including MD Anderson Children's Cancer Hospital, The Salvation Army, American Heart Association, Ronald McDonald House and many more. We value all of our employees who make our growth and success possible. We are proud to offer industry leading compensation, comprehensive benefits, 401(k) match with additional profit sharing, PTO and abundant career opportunities. Come join our award winning 11,000 strong organization as we fuel the world and each other! Summary We are seeking a skilled and dedicated IT Specialist to join our team in the petroleum industry. In this role, you will be responsible for managing IT regulatory compliance efforts across various agencies including the Sarbanes-Oxley Act (SOX), United States Coast Guard (USCG), General Data Privacy Regulation (GDPR) NIS Directive, and Transportation Security Administration (TSA). Your expertise will ensure that our IT systems and practices align with regulatory requirements, maintaining the highest standards of security and compliance. Essential Duties and Responsibilities: Regulatory Compliance Management: Monitor, interpret, and ensure compliance with IT regulatory requirements from SOX, USCG, TSA, GDPR, and other relevant agencies regulating critical infrastructure operators. Develop and maintain comprehensive knowledge of cybersecurity standards, guidelines, and best practices applicable to IT and operations. Policy and Procedure Development: Develop, update, and enforce IT policies, procedures, and controls to align with regulatory requirements and industry standards. Collaborate with stakeholders to ensure policies are implemented effectively across the organization. Risk Assessment and Mitigation: Conduct regular risk assessments and audits of IT systems, identifying vulnerabilities and recommending mitigation strategies to ensure compliance and security. Implement controls and measures to address identified risks and improve overall IT security posture. Audit and Compliance Reporting: Coordinate and support IT audits conducted by internal and external auditors to assess compliance with regulatory requirements. Prepare documentation and evidence and assist in remediation efforts based on audit findings. Training and Awareness: Provide training and awareness sessions on IT regulatory compliance, policies, and procedures to IT staff and other relevant stakeholders. Foster a culture of compliance and security awareness throughout the organization. Continuous Improvement and Innovation: Stay updated on emerging technologies, cybersecurity threats, and regulatory changes affecting the petroleum industry and critical infrastructure operators. Recommend and implement improvements to IT infrastructure and processes to enhance regulatory compliance and cybersecurity resilience. Requirements: Education and/or Experience, Knowledge, Skills & Abilities: To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. The requirements for this position are listed below Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. 2-5 years of experience including 3+ years of experience in IT regulatory compliance, cybersecurity, or a similar role within the petroleum industry. Strong understanding of regulatory frameworks and standards such as SOX, USCG, NIST, and TSA. Experience in conducting IT audits, risk assessments, and implementing IT controls. Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or equivalent certifications preferred. Excellent communication and interpersonal skills, with the ability to collaborate effectively across departments and levels of the organization. Strong analytical and problem-solving skills, with attention to detail and accuracy. Ability to work independently, prioritize tasks, and manage time effectively in a dynamic environment. Required experience is commensurate with the selected job level: The Senior IT Specialist level requires a Bachelor's degree or equivalent experience and 5-8 years of relevant job related experience The Lead IT Specialist level requires a Bachelor's degree or equivalent experience and 8+ years of relevant job related experience The Principal IT Specialist level requires a Bachelor's degree or equivalent experience and 10+ years of relevant job related experience. Benefits: Competitive salary and comprehensive benefits package. Opportunities for professional development and career advancement in a leading petroleum company. Collaborative and supportive work environment focused on innovation and excellence in IT regulatory compliance. Contribution to the safeguarding of critical IT infrastructure and data within the petroleum industry. Join Our Team: If you are a dedicated IT professional with a passion for regulatory compliance and cybersecurity within the petroleum industry, we encourage you to apply for this rewarding position. Join us in ensuring the highest standards of IT regulatory compliance and security while contributing to the success and integrity of our organization. An equal opportunity employer/disability/vet Energy Transfer is an equal opportunity employer and does not discriminate against qualified applicants on the basis of actual or perceived race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. The nature and frequency of the above working conditions and requirements may vary depending on individual operational circumstances. Where feasible, the Partnership will make reasonable accommodations to qualified individuals with disabilities to enable them to perform the essential functions of the job. DISCLAIMER: The statements listed in this job posting, which are subject to change, are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required of personnel so classified.