Cybersecurity Engineer – Risk & Security Governance

Position Summary

We are seeking an experienced Business Information Security Officer (BISO) Engineer to serve as an embedded cybersecurity professional within an assigned business unit. This role bridges enterprise security strategy and day-to-day IT and Operational Technology (OT) environments.

The successful candidate will collaborate with IT, OT, cybersecurity, and business stakeholders to identify security risks, drive remediation efforts, strengthen security controls, and translate enterprise security requirements into practical, actionable programs.

This position requires strong hands-on cybersecurity expertise, risk management capabilities, and the ability to work independently while coordinating cross-functional security initiatives.

Key Responsibilities

• Serve as the primary cybersecurity liaison for assigned business units, translating enterprise security policies into unit-specific controls, procedures, and implementation plans.

• Conduct and support security risk assessments, vulnerability management reviews, and security posture evaluations across applications, infrastructure, and OT environments.

• Lead and support security initiatives involving Web Application Firewalls (WAF), Next-Generation Firewalls (NGFW), Identity and Access Management (IAM), endpoint protection, and cloud security posture.

• Represent the business unit in change management meetings, security governance forums, and risk review discussions.

• Coordinate with enterprise security platforms, including Splunk SIEM, Palo Alto Networks/Panorama, and Imperva Cloud WAF, to ensure effective security monitoring, detection, and enforcement.

• Support mergers and acquisitions (M&A) cybersecurity integration activities, including network segmentation, firewall onboarding, and security baseline validation.

• Develop and maintain security documentation, including policies, procedures, operational runbooks, risk acceptance memoranda, and remediation plans.

• Partner with technical teams to prioritize vulnerabilities, track remediation activities, and ensure security risks are addressed within agreed timelines.

• Communicate security risks, control gaps, remediation progress, and overall security posture to technical stakeholders and senior leadership.

• Collaborate with enterprise cybersecurity teams to ensure alignment with established security standards, governance requirements, and regulatory frameworks.

• Manage cross-functional security initiatives with minimal supervision while maintaining accountability for delivery and outcomes.

Required Qualifications

• 5+ years of experience in cybersecurity engineering, security architecture, information security, or cybersecurity risk management.

• Hands-on experience with one or more of the following: Web Application Firewalls (WAF), Next-Generation Firewalls (NGFW), SIEM platforms, or vulnerability management tools.

• Strong understanding of cybersecurity frameworks and controls, including NIST Cybersecurity Framework (NIST CSF), CMMC, or equivalent standards.

• Experience conducting security risk assessments, evaluating security controls, and coordinating remediation activities.

• Knowledge of network security, identity and access management, endpoint protection, and cloud security principles.

• Experience working with cross-functional teams across IT, security, infrastructure, and business operations.

• Ability to manage multiple security initiatives independently with minimal oversight.

• Strong analytical, problem-solving, documentation, and stakeholder communication skills.

• Ability to present technical security findings and risk assessments to business leaders and senior management.

• Ability to work onsite at the Houston, TX office.

Preferred Qualifications

• Experience in the energy, utilities, or other critical infrastructure industries.

• Familiarity with Operational Technology (OT), Industrial Control Systems (ICS), and associated cybersecurity requirements.

• Experience with Imperva Cloud WAF, Illumio, Splunk, Palo Alto Networks, or Panorama.

• Relevant certifications such as CISSP, CISM, or equivalent cybersecurity credentials.

• Experience supporting cybersecurity integration during mergers and acquisitions.

• Knowledge of network segmentation, firewall policy management, security baseline assessments, and enterprise security governance.

Key Competencies

• Cybersecurity risk assessment and mitigation.

• Security control implementation and validation.

• Vulnerability management and remediation tracking.

• Network security and firewall administration.

• SIEM monitoring and security posture management.

• IT/OT cybersecurity collaboration.

• Security governance, risk, and compliance.

• Cross-functional program coordination.

• Executive communication and stakeholder management.

Work Location

This position is based in Houston, Texas, and requires regular physical presence in the office. Remote work is not available for this role.