Security Technical Analyst

Consumers Energy is Michigan's largest energy provider, providing natural gas and/or electricity to 6.8 million of the state's 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.

This position is not eligible for immigration sponsorship, e.g., H-1B, TN, etc. Please do not apply if you will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B, TN, etc., now or in the future. We are unable to hire individuals with CPT, OPT, or STEM OPT for this position as the position is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship for a work visa.

This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

The role of the Security Technical Analyst - Governance, Risk, and Compliance (GRC) requires strong technical proficiency, exceptional customer service, and excellent written and verbal communication skills. The analyst demonstrates the ability to gather and analyze key details and is adept at sound decision-making. This role encompasses a foundational understanding of technology governance, risk management, controls, and compliance, along with modern cybersecurity issues, asset management life cycles, and data management practices.

The position contributes to the development of roadmaps and standards, helping to ensure they remain current and effective.

The Security Technical Analyst plays a key role on the Risk Management team within the Governance, Risk, and Compliance (GRC) program, acting as a liaison between security, technology, and business stakeholders. This role ensures that security standards are effectively embedded into projects and operations while identifying and addressing control gaps and emerging risks. The analyst leverages cybersecurity and risk management expertise to support audits, strengthen compliance, and improve processes-ultimately enhancing risk visibility, control effectiveness, and organizational resilience.

• Participates in team collaboration efforts, including annual goal setting, planning activities, process improvement initiatives, waste elimination efforts, and daily or weekly operational reviews. Takes an active role in maintaining internal processes, conducting gap analyses, and supporting resolution efforts. Adheres to company quality systems and methodologies.
• Develops and maintains visual dashboards and produces high-quality reports and documentation. Ensures accuracy and clarity through thorough proofreading and provides recommendations to Senior Principal(s), Principal(s), and leadership.
• Contributes as a resource on the IT & Security Governance, Risk, and Compliance team, working independently with company stakeholders while keeping leadership appropriately informed. May also interact with vendors, publishers, governmental agencies, and other organizations.
• Ensures timely completion of deliverables; participates in meetings and review boards; acts as a backup for team members; and supports daily operations, including validation of objectives and KPIs. Takes corrective action when needed and collaborates cross-functionally to achieve goals.
• Continually develops knowledge to support senior staff and leadership in making informed decisions. Demonstrates structured, thoughtful approaches and strong situational awareness. Regularly engages with stakeholders to address questions, ensuring decisions and action items are documented and executed. Exhibits subject matter awareness and a proactive approach in all interactions.
• Performs additional duties as assigned or as necessary.
• Supports analysis and implementation of operational, regulatory, and business mandates, as well as legal requirements. Identifies and analyzes complex or ambiguous business process and technology issues and assists managers with development, enhancement, and maintenance activities.
• Assists with research related to new and existing technologies, architectures, and products. May collaborate with Supply Chain to provide subject matter expertise for contracts.
• Translates technical standards into language accessible to non-technical stakeholders and clearly articulates gaps. Works cross-functionally to ensure standards and policy documents are clear and concise. Supports monitoring of adherence and addresses compliance issues as needed.

• Demonstrated ability to work both independently and collaboratively, with strong organizational skills and the ability to help guide program direction alongside…