The Senior Cybersecurity Compliance Analyst is responsible for translating cybersecurity regulatory, legal, and industry framework requirements into actionablepliance plans that reduceanizational risk and support regulatory obligations. This role serves as a bridge between regulatory requirements and operational implementation by performing gap assessments, developing remediation roadmaps, coordinatingpliance activities, and validating the effectiveness of cybersecurity controls. The ideal candidate possesses strong analytical skills, a deep understanding of cybersecurity andpliance frameworks, and the ability to collaborate across business, IT, legal, and operational teams to achieve and maintainpliance. Key Responsibilities Support day-to-day administration and continuous improvement of the Cybersecurity Compliance program, aligning activities to program objectives and risk priorities.

• Interpret and analyze cybersecurity related laws, regulations, standards (MTSA, TSA, etc.)
• Interpret and analyze privacy laws and regulations associated to Delek (DPA, Texas Security and Privacy Act)
• Translate requirements intopliance controls, tasks, and implementation plans
• Developpliance roadmap and action plans to address regulatory and framework requirements
• Monitor changes in the regulatory landscape and assessanization impact
• Provide rmendations for achieving and sustainingpliance with applicable cybersecurity requirements
• Conduct cybersecuritypliance assessment against stated requirements
• Perform gap analyses to identify deficiencies in processes, controls, documentation andernance practices
• Document assessment results and findings
• Drive cross-functional collaboration with Legal, HR, Internal Audit, Supply Chain, and business units to ensure effective program execution.
• Work closely with SMESs, Information Technology, Operational Technology, Legal, Operations and business stakeholders
• Coordinatepliance training initiatives with key stakeholders and SMEs, including assignments,munications, tracking, and reporting.
• Develop and maintain recurringpliance dashboards and analytics across policyernance.
• Consolidate and analyze program data to identify trends, key risk indicators, policy exceptions, and improvement opportunities; present insights to leadership.
• Prepare executive-level reports and presentation materials for Compliance Committee meetings and otherernance forums. Education And Experience
• Bachelor's degree in business administration, Information Security, Risk Management,pliance, or a related field
• 3-5+ years of experience inpliance, risk management, privacy, cybersecurity GRC or related corporateernance functions.
• Experience conducting cybersecurity assessments and gap analyses
• Experience translating regulations into actionable plans
• Hands-on experience building and executing programs.
• Proven ability to prepare executive-level reports and presentations forernance forums.
• Kledge of cybersecurity regulations and frameworks such as: o NIST Cybersecurity Framework o

NIST 800-171

o CIS Controls o Data Processing Agreement o Texas Data Privacy and Security Act o Martine Transportation Security Act (MTSA

• Professional certifications are a plus Kledge, Skills, And Abilities
• Strong understanding of cybersecuritypliance program elements
• Advanced data analysis and reporting skills; proficiency with Power BI, Excel, and data visualization best practices.
• Excellent written and verbalmunication skills with the ability to translateplex information into clear, executive-ready insights.
• Exceptional attention to detail, documentation discipline, and process orientation.
• Ability to manage multiple priorities with minimal supervision and deliver on deadlines in a dynamic environment.
• Collaborative mindset with strong stakeholder management across Legal, HR, Internal Audit, Procurement, and business teams.
• Sound judgment, discretion, and integrity when handling sensitive information.

#INDG Sr. Compliance Analyst IT Professional