IT Governance, Risk & Compliance Analyst

At Oxy Chem, our chemistry makes modern life possible, and it is our people who make the difference. We are a safety-first, purpose-driven team committed to innovation, environmental responsibility, and doing things the right way. If you are ready to contribute, elevate your skills, and take ownership of your career, Oxychem offers the opportunity to make a difference every day.

Oxy Chem, a Berkshire Hathaway company, is a leading producer of essential chemistry with operations in the U.S., Canada and Latin America. Oxy Chem's products play an essential role in everyday life, supporting critical applications in water treatment, pharmaceuticals, healthcare, manufacturing, automotive, personal hygiene, and residential and commercial construction. Oxy Chem actively participates in the Occupational Safety and Health Administration Voluntary Protection Program, underscoring our commitment to safety.

Headquartered in Dallas, Texas, Oxy Chem is a top three U.S. manufacturer of polyvinyl chloride, chlor-alkali and chlorinated organic chemicals, and calcium chloride. Visit  for more information.

In a fast-paced industry that demands precision, we create a supportive workplace where the safety and well-being of our employees are paramount. We are committed to rewarding top performers, offering very competitive pay and benefits, and providing tremendous career development opportunities.

Oxy Chem is seeking a mid-level IT Governance, Risk & Compliance (GRC) Analyst to support cybersecurity governance, risk management, compliance, audit readiness, and security awareness efforts. Working with guidance from senior team members, this role will partner with IT, Internal Audit, Legal, Compliance, Human Resources, and business stakeholders to identify, assess, track, and communicate cybersecurity risks across the enterprise.

• Support the implementation and ongoing maintenance of cybersecurity governance, risk management, and compliance processes aligned with business objectives and established standards.
• Perform IT and business risk assessments, document results, and maintain risk registers using frameworks such as the NIST Cybersecurity Framework and ISO 27001.
• Track remediation activities, corrective action plans, and control gaps, following up with owners and escalating overdue items as appropriate.
• Support internal and external cybersecurity audits, assessments, and compliance reviews by coordinating evidence collection, documentation, responses, and status tracking.
• Help evaluate compliance with applicable regulatory, contractual, and cybersecurity requirements, including MTSA, GDPR, and relevant industry standards.
• Review cybersecurity requirements in contracts, vendor agreements, exception requests, and compensating-control documentation with oversight from senior team members.
• Collect, validate, and report Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), compliance metrics, and remediation progress.
• Assist with the development and maintenance of cybersecurity policies, standards, procedures, and guidelines.
• Support periodic risk reviews and third-party cybersecurity risk management activities.

• Serve as a day-to-day point of contact for audit evidence requests and compliance documentation under the direction of senior GRC leadership.
• Test and assess control design and operation using established procedures, documenting observations and identifying opportunities for improvement.
• Support cybersecurity maturity assessments, benchmarking activities, and continuous audit-readiness efforts.
• Prepare clear management reporting on compliance status, audit findings, remediation progress, and cybersecurity risks.