Specialist - IT Compliance

Are you interested in joining our team? Chat with our digital assistant to learn more about our company and apply right from your mobile device!
Text ETP to 25000 to get started or apply through this web posting if you prefer.

Energy Transfer, recognized by Forbes as one of America's best large employers, is dedicated to responsibly and safely delivering America's energy. We are driven to inspire our employees to create superior value for our customers, our investors, a sustainable future and giving back to the community where we have long-standing commitments to causes including MD Anderson Children's Cancer Hospital, The Salvation Army, American Heart Association, Ronald McDonald House and many more.

We value all of our employees who make our growth and success possible. We are proud to offer industry leading compensation, comprehensive benefits, 401(k) match with additional profit sharing, PTO and abundant career opportunities.

Come join our award winning 11,000 strong organization as we fuel the world and each other!

Summary

We are seeking a skilled and dedicated IT Specialist to join our team in the petroleum industry. In this role, you will be responsible for managing IT regulatory compliance efforts across various agencies including the Sarbanes-Oxley Act (SOX), United States Coast Guard (USCG), General Data Privacy Regulation (GDPR) NIS Directive, and Transportation Security Administration (TSA). Your expertise will ensure that our IT systems and practices align with regulatory requirements, maintaining the highest standards of security and compliance.

Essential Duties and Responsibilities:

1. Regulatory Compliance Management:




• Monitor, interpret, and ensure compliance with IT regulatory requirements from SOX, USCG, TSA, GDPR, and other relevant agencies regulating critical infrastructure operators.
• Develop and maintain comprehensive knowledge of cybersecurity standards, guidelines, and best practices applicable to IT and operations.




2. Policy and Procedure Development:




• Develop, update, and enforce IT policies, procedures, and controls to align with regulatory requirements and industry standards.
• Collaborate with stakeholders to ensure policies are implemented effectively across the organization.




3. Risk Assessment and Mitigation:




• Conduct regular risk assessments and audits of IT systems, identifying vulnerabilities and recommending mitigation strategies to ensure compliance and security.
• Implement controls and measures to address identified risks and improve overall IT security posture.




4. Audit and Compliance Reporting:




• Coordinate and support IT audits conducted by internal and external auditors to assess compliance with regulatory requirements.
• Prepare documentation and evidence and assist in remediation efforts based on audit findings.




5. Training and Awareness:




• Provide training and awareness sessions on IT regulatory compliance, policies, and procedures to IT staff and other relevant stakeholders.
• Foster a culture of compliance and security awareness throughout the organization.




6. Continuous Improvement and Innovation:




• Stay updated on emerging technologies, cybersecurity threats, and regulatory changes affecting the petroleum industry and critical infrastructure operators.
• Recommend and implement improvements to IT infrastructure and processes to enhance regulatory compliance and cybersecurity resilience.