Cybersecurity Engineer

Marathon Petroleum seeks a Senior Cybersecurity Engineer focused on GRC automation and continuous control monitoring for its complex refining and logistics operations. In this role, you will design and implement automated security controls, integrate GRC platforms with security tools, and build monitoring dashboards to strengthen compliance with NIST, ISO 27001, and internal policies. You will partner with IT, OT, and compliance teams to assess risks, remediate control gaps, and streamline evidence collection, supporting a performance-driven, safety-focused, and environmentally responsible energy enterprise., * Design and maintain automated cybersecurity and compliance controls across IT and OT environments

• Implement and enhance continuous control monitoring for security and regulatory requirements
• Integrate GRC platforms with security tools to streamline evidence collection and reporting
• Conduct risk assessments, identify control gaps, and drive remediation plans
• Develop dashboards and metrics to track control effectiveness and compliance posture
• Collaborate with IT, OT, and compliance teams to embed security into energy operations
• Support audits and regulatory reviews with automated control evidence and reporting
• Document standards, procedures, and automation runbooks for GRC processes

• Cybersecurity engineering
• Governance, Risk & Compliance (GRC)
• Continuous control monitoring (CCM)
• Security automation (e.g., SOAR, scripts)
• NIST CSF / NIST 800-53 frameworks
• ISO 27001/2 compliance
• Cloud security (AWS/Azure)
• Security tooling integration (SIEM, GRC tools)
• Risk assessment and remediation
• Scripting (Python/Power
• Shell)