Sr. Compliance Analyst

The Senior Cybersecurity Compliance Analyst is responsible for translating cybersecurity regulatory, legal, and industry framework requirements into actionable compliance plans that reduce organizational risk and support regulatory obligations. This role serves as a bridge between regulatory requirements and operational implementation by performing gap assessments, developing remediation roadmaps, coordinating compliance activities, and validating the effectiveness of cybersecurity controls.

The ideal candidate possesses strong analytical skills, a deep understanding of cybersecurity and compliance frameworks, and the ability to collaborate across business, IT, legal, and operational teams to achieve and maintain compliance.

Key Responsibilities Support day-to-day administration and continuous improvement of the Cybersecurity Compliance program, aligning activities to program objectives and risk priorities.

� Interpret and analyze cybersecurity related laws, regulations, standards (MTSA, TSA, etc.)

� Interpret and analyze privacy laws and regulations associated to Delek (DPA, Texas Security and Privacy Act)

�

� Translate requirements into compliance controls, tasks, and implementation plans

� Develop compliance roadmap and action plans to address regulatory and framework requirements

� Monitor changes in the regulatory landscape and assess organization impact

� Provide recommendations for achieving and sustaining compliance with applicable cybersecurity requirements

� Conduct cybersecurity compliance assessment against stated requirements

� Perform gap analyses to identify deficiencies in processes, controls, documentation and governance practices

� Document assessment results and findings

� Drive cross-functional collaboration with Legal, HR, Internal Audit, Supply Chain, and business units to ensure effective program execution.

� Work closely with SMESs, Information Technology, Operational Technology, Legal, Operations and business stakeholders

� Coordinate compliance training initiatives with key stakeholders and SMEs, including assignments, communications, tracking, and reporting.

� Develop and maintain recurring compliance dashboards and analytics across policy governance.

� Consolidate and analyze program data to identify trends, key risk indicators, policy exceptions, and improvement opportunities; present insights to leadership.

� Prepare executive-level reports and presentation materials for Compliance Committee meetings and other governance forums.

Education And Experience

� Bachelor's degree in business administration, Information Security, Risk Management, compliance, or a related field

� 3-5+ years of experience in compliance, risk management, privacy, cybersecurity GRC or related corporate governance functions.

� Experience conducting cybersecurity assessments and gap analyses

� Experience translating regulations into actionable plans

� Hands-on experience building and executing programs.

� Proven ability to prepare executive-level reports and presentations for governance forums.

� Knowledge of cybersecurity regulations and frameworks such as:

o NIST Cybersecurity Framework

o NIST 800-171

o CIS Controls

o Data Processing Agreement

o Texas Data Privacy and Security Act

o Martine Transportation Security Act (MTSA

� Professional certifications are a plus

Knowledge, Skills, And Abilities

� Strong understanding of cybersecurity compliance program elements

� Advanced data analysis and reporting skills; proficiency with Power BI, Excel, and data visualization best practices.

� Excellent written and verbal communication skills with the ability to translate complex information into clear, executive-ready insights.

� Exceptional attention to detail, documentation discipline, and process orientation.

� Ability to manage multiple priorities with minimal supervision and deliver on deadlines in a dynamic environment.

� Collaborative mindset with strong stakeholder management across Legal, HR, Internal Audit, Procurement, and business teams.

� Sound judgment, discretion, and integrity when handling sensitive information.