Senior Information Security Engineer – GRC Automation

Marathon Petroleum seeks a Senior Cybersecurity Engineer focused on GRC automation and continuous control monitoring for its complex refining and logistics operations. In this role, you will design and implement automated security controls, integrate GRC platforms with security tools, and build monitoring dashboards to strengthen compliance with NIST, ISO 27001, and internal policies. You will partner with IT, OT, and compliance teams to assess risks, remediate control gaps, and streamline evidence collection, supporting a performance-driven, safety-focused, and environmentally responsible energy enterprise. Design and maintain automated cybersecurity and compliance controls across IT and OT environments Implement and enhance continuous control monitoring for security and regulatory requirements Integrate GRC platforms with security tools to streamline evidence collection and reporting Conduct risk assessments, identify control gaps, and drive remediation plans Develop dashboards and metrics to track control effectiveness and compliance posture Collaborate with IT, OT, and compliance teams to embed security into energy operations Support audits and regulatory reviews with automated control evidence and reporting Document standards, procedures, and automation runbooks for GRC processes Cybersecurity engineering Governance, Risk & Compliance (GRC) Continuous control monitoring (CCM) Security automation (e.g., SOAR, scripts) NIST CSF / NIST 800-53 frameworks ISO 27001/2 compliance Cloud security (AWS/Azure) Security tooling integration (SIEM, GRC tools) Risk assessment and remediation Scripting (Python/PowerShell) Medical Insurance Dental Insurance Vision Insurance Life Insurance 401k CISSP CISM CRISC CISA ISO 27001 Lead Implementer or Auditor Certified in Cybersecurity (entry-level, optional)