Senior IT Compliance and Risk Analyst

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy.

About the Role

This position supports and advances the cybersecurity Governance, Risk and Compliance program through the development, maintenance, communication, and oversight of cybersecurity policies, standards, programs, and procedures. The role serves as a key contributor to the organization's cybersecurity governance framework, ensuring alignment with business objectives, regulatory requirements, industry frameworks, and enterprise risk management practices. The focus is primarily on governance activities, including policy and standards management, framework development, document lifecycle management, stakeholder engagement, and governance reporting. The role also supports cybersecurity risk management and compliance activities through assessments, issue remediation tracking, control validation, and audit support.

This job supports teams facilitating internal solution development across business units to align Cybersecurity risk, leading technology solutions, and user experience. The position is responsible for various aspects of achieving compliance in cybersecurity, including developing, implementing, and enforcing IT policies, standards, methodologies, and awareness using a risk-based approach. Employees in this role develop a deep understanding of NextEra’s technology footprint, technology strategy, threat landscape, and risks to establish a collective Cyberstrategy.

Responsibilities

• Builds processes and tools to provide the business visibility of cybersecurity risks and drive accountability
• Develops and maintains policies, standards, processes, and procedures to assess, monitor, report, escalate, and remediate cyber risk while maintaining corporate compliance with mandated security regulations
• Assesses and reviews security and controls to ensure sustainable regulatory compliance
• Develops processes and monitoring to identify, quantify, analyze, and report risk and compliance status
• Coordinates cyber risk management efforts including identification, assessment, tracking, and resolution of risk management activities across all levels of the organization
• Assists with training, including training material development and deployment to ensure that compliance and risk becomes a sustainable business practice
• Gathers and prepares documentation to support audits, self-assessments, data requests, etc.
• Performs other job-related duties as assigned

Requirements

• High School Grad / GED
• Bachelor’s or Equivalent Experience
• 4+ years of relevant experience

Preferred Qualifications

• Bachelor’s Degree
• Certified Information Systems Auditor (CISA) certification
• Project Management Professional (PMP)
• Six Sigma Green Belt Certified

Benefits

NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click here to learn more.

Employee Group: Exempt
Employee Type: Full Time
Organization: Florida Power & Light Company