Sr. Compliance Analyst

Senior Cybersecurity Compliance AnalystThe Senior Cybersecurity Compliance Analyst is responsible for translating cybersecurity regulatory, legal, and industry framework requirements into actionable compliance plans that reduce organizational risk and support regulatory obligations. This role serves as a bridge between regulatory requirements and operational implementation by performing gap assessments, developing remediation roadmaps, coordinating compliance activities, and validating the effectiveness of cybersecurity controls.The ideal candidate possesses strong analytical skills, a deep understanding of cybersecurity and compliance frameworks, and the ability to collaborate across business, IT, legal, and operational teams to achieve and maintain compliance.Key Responsibilities:Support day-to-day administration and continuous improvement of the Cybersecurity Compliance program, aligning activities to program objectives and risk priorities.Interpret and analyze cybersecurity related laws, regulations, standards (MTSA, TSA, etc.)Interpret and analyze privacy laws and regulations associated to Delek (DPA, Texas Security and Privacy Act)Translate requirements into compliance controls, tasks, and implementation plansDevelop compliance roadmap and action plans to address regulatory and framework requirementsMonitor changes in the regulatory landscape and assess organization impactProvide recommendations for achieving and sustaining compliance with applicable cybersecurity requirementsConduct cybersecurity compliance assessment against stated requirementsPerform gap analyses to identify deficiencies in processes, controls, documentation and governance practicesDocument assessment results and findingsDrive cross-functional collaboration with Legal, HR, Internal Audit, Supply Chain, and business units to ensure effective program execution.Work closely with SMESs, Information Technology, Operational Technology, Legal, Operations and business stakeholdersCoordinate compliance training initiatives with key stakeholders and SMEs, including assignments, communications, tracking, and reporting.Develop and maintain recurring compliance dashboards and analytics across policy governance.Consolidate and analyze program data to identify trends, key risk indicators, policy exceptions, and improvement opportunities; present insights to leadership.Prepare executive-level reports and presentation materials for Compliance Committee meetings and other governance forums.Education And Experience:Bachelor's degree in business administration, Information Security, Risk Management, compliance, or a related field3-5+ years of experience in compliance, risk management, privacy, cybersecurity GRC or related corporate governance functions.Experience conducting cybersecurity assessments and gap analysesExperience translating regulations into actionable plansHands-on experience building and executing programs.Proven ability to prepare executive-level reports and presentations for governance forums.Knowledge of cybersecurity regulations and frameworks such as:NIST Cybersecurity FrameworkNIST 800-171CIS ControlsData Processing AgreementTexas Data Privacy and Security ActMartine Transportation Security Act (MTSA)Professional certifications are a plusKnowledge, Skills, And Abilities:Strong understanding of cybersecurity compliance program elementsAdvanced data analysis and reporting skills; proficiency with Power BI, Excel, and data visualization best practices.Excellent written and verbal communication skills with the ability to translate complex information into clear, executive-ready insights.Exceptional attention to detail, documentation discipline, and process orientation.Ability to manage multiple priorities with minimal supervision and deliver on deadlines in a dynamic environment.Collaborative mindset with strong stakeholder management across Legal, HR, Internal Audit, Procurement, and business teams.Sound judgment, discretion, and integrity when handling sensitive information.