Xcel Energy (NASDAQ: XEL) is a leading energy provider and Fortune 500 company, dedicated to serving millions of electricity and natural gas customers across eight states: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient, and sustainable energy.
Xcel Energy is a place where you’ll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you’ll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best.
Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday–Thursday); however, work location expectations vary based on role, team, and business needs.
Position Summary
As a Functional Security Governance and Controls Analyst, you will be responsible for aspects of the security governance program that addresses security policies, security standards, training and awareness, metrics, and reporting. Drive the development and evaluation of security controls, self-assessments, spot-checks, risk identification, process gaps, and process alignment. Interface with the enterprise security organization, including cyber security, physical security, and enterprise resilience, as well as across other business areas, to assess organizational alignment to security controls.
Essential Responsibilities
PROGRAM DEVELOPMENT & MAINTENANCE: Contribute to the development, implementation and execution of the Policy and Compliance governance program and supporting processes documentation. Participate in the review and update cycle for security policies, procedures, standards, and controls. Ensure security requirements are mapped to in scope regulations and frameworks.
PROGRAM EXECUTION (OPERATIONS) : Engage in control assessment activities with Enterprise Security Services and the business units, addressing a range of security and regulatory requirements that are both technical and functional in nature. Assist with the scheduling and execution of security self-assessments and spot checks, and the assessment of control activities. Under the direction of team leads, document gaps and system vulnerabilities, identify risks and work with the Risk Management team to properly input risks into the Risk Management process.
PROGRAM METRICS & REPORTING : Compile and review output from security controls assessment program. Work with leads to analyze information and formulate recommendations and reports for management review and decision making.
PROGRAM TRAINING AND AWARENESS: Participate in the development and implementation of training, training materials, and events related to the ESS Governance Program.
Other duties as assigned.
Control Performance & Monitoring: Execute daily, weekly, and quarterly identity control checks to ensure strict adherence to SOX and internal security frameworks.
Assurance Capability Execution: Deploy and operate new technical assurance processes designed to proactively identify access anomalies, orphaned accounts, and segregation of duty (SoD) violations.
Environment Hardening: Partner closely with the "Run" and "Build" teams to remediate identified gaps, ensuring vulnerabilities are closed before they result in audit findings.
Audit Readiness: Compile, validate, and maintain high-fidelity evidence and documentation required for internal and external regulatory audits.
Minimum Requirements
Bachelor's degree or equivalent education, military and/or law enforcement or Corporate Security experience providing equivalent knowledge.
Three years of experience in physical…