Xcel Energy

Security Risk Analyst

Minneapolis, MN, 55401

Sponsorship not specified$74k-$105kDetected 13 days ago

CybersecurityComplianceAccessibilityAuditingRecruitingCommunicationPublic SpeakingAdaptabilityRisk ModelingCISSP

About the role

Executes critical aspects of the Enterprise Security Risk Management function.
Oversees the risk review process and reporting across the enterprise.
Oversees the risk acceptance process across the enterprise to ensure risks are documented and accepted at the correct levels of the organization.

Minimum of 3 years experience working in a security function. (One year of working in a highly regulated environment e.g. Utilities, Financial, may substitute for up to 18 months experience in a security function.)
2 years of experience with risk assessments, audit or control testing.
Knowledge of security and lifecycle management, including auditing methodology or technology risk assessments.
Experience working with information security policies, standards, industry best practices and/or frameworks (e.g., ISO 27K, NIST 800-53, FISMA, BITS, etc.)
Knowledge of IT Security tools and technologies used in an enterprise environment.

Security Frameworks & Controls: Working knowledge of security frameworks and standards (e.g., NIST, ISO 27001) and ability to apply control requirements within risk assessments and findings.
GRC Tooling: Familiarity with GRC platforms such as Archer and/or ProcessUnity for documenting assessments, tracking risks, and managing findings lifecycle.
Security & Risk Background: ~5+ years of experience in cybersecurity, IT risk, GRC, audit, compliance, or security consulting.
In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation.
You will not be penalized for redacting or removing this information.
Deadline to Apply: 07/21/26

Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part.

EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination | Equal Opportunity Policy (PDF) | Employee Rights (PDF)
All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility.
Xcel Energy endeavors to make https://www.xcelenergy.com/ accessible to any and all users.
If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at recruiting@xcelenergy.com.
This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination |
Equal Opportunity Policy (PDF) | Employee Rights (PDF)

This listing is sourced directly from Xcel Energy's careers page and normalized into a canonical job model.