IT Advisor - Governance & Compliance (Dallas or Houston, TX)

Contribute. Grow. Lead...with OxyChem. Looking for a challenge? Desire to achieve your true potential? OxyChem is a growing, action-oriented, safety driven chemical manufacturing company continually striving to be the best in the business while staying focused on environmental protection. The secret to our success has and will continue to be our people.

Occidental Chemical Corporation (OxyChem) is a leading North American manufacturer of polyvinyl chloride (PVC) resins, chlorine and caustic soda – key building blocks for a variety of indispensable products such as plastics, pharmaceuticals and water treatment chemicals. Other OxyChem products include caustic potash, chlorinated organics, sodium silicates, chlorinated isocyanurates and calcium chloride. OxyChem's market position is among the top three producers in the United States for the principal products it manufactures and markets. Based in Dallas, Texas, the company has manufacturing facilities in the U.S., Canada and Latin America.

In a fast-paced industry that demands precision, we create a supportive workplace where the safety and well-being of our employees are paramount. We are committed to rewarding top performers, offering very competitive pay and benefits, and providing tremendous career development opportunities.

We are seeking a Cybersecurity Analyst who will play a dual role in strengthening our organization’s cybersecurity posture. This position combines Governance, Risk, and Compliance (GRC) responsibilities with leadership in cybersecurity awareness and cultural change initiatives. You will collaborate across IT and business units to ensure regulatory compliance, mitigate risks, and foster a strong security culture through engaging awareness programs.

# Key Responsibilities:

Governance, Risk & Compliance

- Implement governance and risk frameworks, manage IT controls, and support security audits and assessments.

- Conduct IT and business risk assessments; maintain risk registers aligned with frameworks such as NIST and ISO 27001.

- Manage corrective action plans identified in risk assessments through closure.

- Ensure compliance with regulatory requirements (e.g., MTSA, GDPR) and maintain audit readiness.

- Review cybersecurity clauses in contracts, exceptions requests, and mitigating controls.

- Develop and monitor cybersecurity KRIs and KPIs; report risk and compliance metrics to leadership.

- Support policy creation, updates, and governance initiatives to align IT security with business objectives.

- Design and manage a comprehensive Cybersecurity Awareness Program, including phishing simulations and targeted training for high-risk roles..

Technical & Operational Support

- Monitor Cyber Threat Intelligence sources (CISA, FBI, etc.) and propose innovative risk mitigation strategies.

- Coordinate cybersecurity assessments (maturity, risk, penetration testing).

- Maintain relationships with third-party risk assessment providers and ensure service levels.

- Collaborate with system engineers to implement security controls and patches.

# Qualifications:

- Bachelor’s degree in Management Information Systems, Computer Science, Information Security, Risk Management, or related field.

- 4–5+ years in Information Security, Cybersecurity, or GRC roles.

- Experience with frameworks like ISO 27001 and NIST 2.0

- Proven experience in cybersecurity awareness program design and delivery.

- Strong analytical and problem-solving abilities.

- Excellent communication and stakeholder management skills.

- Hands-on experience with GRC tools (e.g., RSA Archer, ServiceNow, AuditBoard).

- Knowledge of adult learning principles and e-learning platforms.

- Familiarity with OT network infrastructure, SCADA/DCS systems, and security integration into SDLC.

Preferred Experience:

- Knowledge of third-party risk management and vendor compliance.

- Experience in IT auditing and identity/access management.

# Preferred Certifications

- CISSP, CISM, CISA, or equivalent.

- GRC-related certifications (e.g., ISACA CRISC).

Recruitment Fraud

It has come to our attention various individuals and/or organizations are contacting people falsely pretending to recruit on behalf of Oxy. Please be aware that these recruiting scams and communications do not originate nor are they associated with our recruitment process. All Oxy job postings and offers will require a completed application through our company website.

Oxy does not charge a fee at any stage of the recruiting process. We will never:

• Ask you to pay for applications, interviews, meetings, processing, training or for any other fees

• Use recruiting or placement agencies that charge candidates an advance fee of any kind or

• Request personal information such as passport and bank account details at an early stage of our recruitment process.

We recommend against responding to unsolicited business propositions or offers from people you don't know. Do not disclose your personal or financial details. If you believe you have been the victim of a recruiting scam, please contact your local police department.

All qualified applicants will receive consideration for employment without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.