Senior Information Security Engineer -

GRC Automation Date Posted:

5 October 2026

Closing Date:

November 4, 2026

Recruiter:

Marathon Petroleum Location:

San Marcos, Texas Salary:

USD130,000

to

USD172,000

Job Type & Industry:

Data, Ai & Technology >

Ai & Technology Governance, Technology Risk, Security Engineer, Corporate Governance & GRC Contract Type:

Permanent Job Reference:

3005091840-2 Apply for this job now Job Description Marathon Petroleum seeks a Senior Cybersecurity Engineer focused on GRC automation and continuous control monitoring for its complex refining and logistics operations. In this role, you will design and implement automated security controls, integrate GRC platforms with security tools, and build monitoring dashboards to strengthen compliance with

NIST, ISO

27001, and internal policies. You will partner with IT, OT, and compliance teams to assess risks, remediate control gaps, and streamline evidence collection, supporting a performance-driven, safety-focused, and environmentally responsible energy enterprise. Responsibilities Design and maintain automated cybersecurity and compliance controls across IT and OT environments Implement and enhance continuous control monitoring for security and regulatory requirements Integrate GRC platforms with security tools to streamline evidence collection and reporting Conduct risk assessments, identify control gaps, and drive remediation plans Develop dashboards and metrics to track control effectiveness and compliance posture Collaborate with IT, OT, and compliance teams to embed security into energy operations Support audits and regulatory reviews with automated control evidence and reporting Document standards, procedures, and automation runbooks for GRC processes Required Skills Cybersecurity engineering Governance, Risk & Compliance (GRC) Continuous control monitoring (CCM) Security automation (e.g., SOAR, scripts)

NIST CSF / NIST 800-53

frameworks

ISO 27001/2

compliance Cloud security (AWS/Azure) Security tooling integration (SIEM, GRC tools) Risk assessment and remediation Scripting (Python/Power Shell)