IT Security Specialist

About the role

We are looking for an IT Security Specialist to support cybersecurity governance, risk, and compliance efforts for an energy and natural resources organization in King of Prussia, Pennsylvania. This position focuses on strengthening security oversight by partnering with teams across the business to develop, maintain, and improve processes that align with regulatory expectations and internal risk standards. The ideal candidate brings strong analytical judgment, attention to detail, and hands-on experience with cybersecurity compliance frameworks in utility or natural gas environments.

Responsibilities

• Partner with business and technical stakeholders to build and refine cybersecurity governance, risk, and compliance activities across the organization.
• Evaluate security controls and compliance obligations to help ensure alignment with applicable regulations, legal requirements, and internal policies.
• Conduct risk assessments, document findings, and recommend practical mitigation strategies that support enterprise cybersecurity objectives.
• Maintain policies, standards, and procedures that strengthen the company’s cybersecurity governance framework.
• Track compliance initiatives, monitor remediation progress, and prepare clear reporting for leadership and risk management teams.
• Support cybersecurity oversight for operational technology environments, including SCADA-related considerations where applicable.
• Coordinate with cross-functional teams to identify gaps, improve control effectiveness, and promote consistent governance practices.
• Contribute to audits, assessments, and evidence collection activities by organizing documentation and responding to compliance inquiries.

Requirements

• Experience in cybersecurity governance, risk, and compliance within a regulated environment.
• Working knowledge of GRC principles, risk management methodologies, and control assessment practices.
• Familiarity with cybersecurity considerations for utilities, energy, natural gas, or similar critical infrastructure sectors.
• Exposure to SCADA or other operational technology security concepts is strongly preferred.
• Ability to interpret regulatory and compliance requirements and translate them into actionable security processes.

Qualifications

• Strong analytical, organizational, and documentation skills with close attention to detail.
• Effective communication skills and the ability to collaborate with cross-functional teams and leadership stakeholders.